Typosquatting involves registering a domain name that closely mimics a well-known domain name. ITRUST monitors this activity by gathering and analyzing publicly available data to identify similar domain names and prevent brand impersonation.

ITrust identifies three main categories of digital signatures:

• Public Area: covers the public attack surface and includes risks such as typosquatting and supply chain attacks.
• Social Engineering Area: covers personal identifiable information (PII) and includes risks such as identity theft and targeted phishing.

Raw Area: covers public IP addresses and includes risks such as botnets and data leaks.

ITrust provides several bundles, notably:

• Darknet FLASH: includes 50 signatures and a single report delivered at the end of the investigation.
• Darknet LIVE: includes 50 signatures, a real-time alerting system, and two semi-annual reports.

Darknet DEEP LIVE: includes 100 signatures, a real-time alerting system, and four quarterly reports.

ITRUST utilizes crawling tools to conduct mass processing and initial data sorting across the surface web, deep web, and dark web. This data is then exported to an externalized database and analyzed via a search engine. Manual analysis systematically complements automated queries to assess the criticality of the intelligence.

The Dark Web is intentionally concealed using specific technologies to ensure anonymity and is frequently leveraged for illicit activities. The Deep Web, in contrast, is simply unindexed content that often requires authentication. It includes corporate documents, internal databases, and paywalled resources.

A digital signature enables an organization to be identified across digital assets. This data may pertain to its partners, customers, or employees.

E.g., domain name, IP address range, brand name, employee names, project name, sensitive business applications, supply chain, etc.

Our Dark Web Monitoring solution delivers comprehensive visibility, detecting a wide range of attacks. These cyber threats include:

• Identity theft;
• Domain spoofing (typosquatting);
• CEO fraud (Business Email Compromise);
• Ransomware;
• Attack vectors and TTPs;
• Technical vulnerabilities;
• Leaked credentials;
• Exfiltrated customer data and proprietary assets;
• Preparation for targeted attacks against infrastructure (APT) or brand reputation;

• …

The Dark Web is part of the World Wide Web that is not accessible via standard search engines such as Google, Bing, or Yahoo. It is part of the Deep Web, which encompasses all parts of the web not indexed by standard search engines; however, the Dark Web is specifically known for requiring specific, secure tools to access it, such as the Tor (The Onion Router) network or I2P (Invisible Internet Project).

The Dark Web is often associated with illegal activities such as the trafficking of drugs, weapons, illegal services, and the buying and selling of sensitive corporate data.