Typosquatting: When a single typo lands you in the hands of hackers

Have you ever wanted to go to Facebook or Google, typed the address in a hurry, and hit Enter, only to realize you mistyped a letter? Usually, your browser corrects you. But sometimes, you end up on a site that looks exactly like the original but behaves strangely.

This isn’t just a technical glitch—it’s a trap set intentionally. The phenomenon is called typosquatting (or “URL hijacking”) and is one of the oldest and most effective methods of data theft. At Altanet Craiova, we know that speed is the enemy of security, so we’ll explain how to avoid falling into this invisible trap.

What is Typosquatting and how does it take advantage of your inattention?

The name comes from the combination of the words "Typo" (typing error) and "Squatting" (to occupy a space abusively). Hackers buy thousands of web domains that closely resemble popular ones, banking on the fact that users will make mistakes when typing.

For example, if the real site is example.com, a hacker might buy:

• Omitting a letter: xample.com
• Reversing letters: exmeplu.com
• Wrong extension: example.co instead of .com

Why is this so dangerous?

If you land on such a site, hackers don’t greet you with a black screen and skulls. On the contrary, they perfectly copy the design of the original site (your bank, your favorite online store, or your work login page).

You think you’re in the right place, enter your username and password, and the site gives you an “error” or redirects you to the real page. But the damage has already been done: the hackers have already saved your data. Sometimes, these sites may even try to install viruses under the guise of “urgent updates.”

How do you protect yourself from clone sites?

The solution isn’t to type as slowly as a snail, but to use your browser’s smart tools:

• Use Bookmarks (Favorites): Don’t manually type the address of your bank or critical platforms every time. Save them to your bookmarks bar and access them with a single click. It’s the safest method.
• Check the address bar: Before entering your password or card details, look at the top. Is the website’s name spelled correctly? Is there that security lock (HTTPS), but be careful—hackers can have a lock too! Double-check the domain name.
• Be careful with Google searches: Sometimes, hackers pay for ads so that their misspelled websites appear at the top of the list. Don’t blindly click on the first result marked “Sponsored” if the name looks strange.

To understand the technical mechanism by which attackers register these similar domains, you can consult Kaspersky’s security library on Typosquatting.

Conclusion

In the digital age, one extra or missing letter can make the difference between a secure account and a compromised one. Pay attention to details and don’t rush when it comes to your sensitive data.

Do you need web filtering solutions for your company that automatically block employees’ access to dangerous sites? Our team offers managed IT security services. Visit our contact page and let’s talk.

---

This material is part of Altanet’s educational series on digital security. Want to know what other risks you’re facing this year? See the complete list of cyber threats for 2026.