What is typosquatting and how to prevent it

[albert-mueller]

Typosquatting is a technique that attackers misspel the URL (for example, opencorelegacypatcher.net instead of https://github.com/dortania/OpenCore-Legacy-Patcher/ or opencorelegacypatchert2.net instead of https://github.com/albert-mueller/OpenCore-Legacy-Patcher-T2). This is a technique often designed to trick users into downloading malware or visit websites where bots are clicking on ads so attackers gain money. To prevent this, I recommend to avoid downloading OpenCore Legacy Patcher from untrusted sites and stick to the following GitHub repositories:
OpenCore Legacy Patcher T2 (Albert Müller): https://github.com/albert-mueller/OpenCore-Legacy-Patcher-T2
OpenCore Legacy Patcher (Dortania): https://github.com/dortania/OpenCore-Legacy-Patcher/
I wish you to stay safe, stay secure.

Originally posted by @albert-mueller in https://github.com/albert-mueller/OpenCore-Legacy-Patcher-T2/discussions/63

[albert-mueller]

Example of a typosquatting website:

[albert-mueller]

[albert-mueller]

Sometimes, typosquatting in a project is mistaken and not malicious. Here's an example:

[albert-mueller]

dortania/OpenCore-Legacy-Patcher#1120

[gandolf243]

@albert-mueller, opencorelegacypatcher.net says that it is not Dortania and it is a mirror. That isn't typosquatting.