: A technical preprint (available on arXiv) that discusses the collisions between the namespace for filenames and DNS names.
: An analysis of 17,000 .zip domains that found over 600 active Windows Trojans hosted on these sites as of March 2024. stronka.zip
: This paper analyzes how attackers exploit "file-to-domain confusion," specifically when a string like document.zip could be either a local file or a malicious website. It details threat scenarios including cryptocurrency mining scripts disguised as file extraction processes. Why "stronka.zip" Is a Landmark Case : A technical preprint (available on arXiv) that
: Browsers actually treat everything before the @ as "user info" and only care about what follows it. Other Noteworthy Studies The domain stronka
: A user who thinks they are downloading a file from a trusted source is instead sent to the stronka.zip website, which can trigger an automatic malware download. Other Noteworthy Studies
The domain stronka.zip became famous as a proof-of-concept for a technique popularized by researcher Bobby Rau .
The New Google .zip TLD: Examining Potential Cybersecurity Risks
: A technical preprint (available on arXiv) that discusses the collisions between the namespace for filenames and DNS names.
: An analysis of 17,000 .zip domains that found over 600 active Windows Trojans hosted on these sites as of March 2024.
: This paper analyzes how attackers exploit "file-to-domain confusion," specifically when a string like document.zip could be either a local file or a malicious website. It details threat scenarios including cryptocurrency mining scripts disguised as file extraction processes. Why "stronka.zip" Is a Landmark Case
: Browsers actually treat everything before the @ as "user info" and only care about what follows it.
: A user who thinks they are downloading a file from a trusted source is instead sent to the stronka.zip website, which can trigger an automatic malware download. Other Noteworthy Studies
The domain stronka.zip became famous as a proof-of-concept for a technique popularized by researcher Bobby Rau .
The New Google .zip TLD: Examining Potential Cybersecurity Risks