@p0lr You pretty much covered what can be done from a DIY perspective in your original toot:

• Frequent checks on social media platforms
• Checks of newly registered domains
• crt.sh for SSL data
• Checks on mobile app stores
• Typo-squatting searches (something like this
• Make sure people who operate Public Relations/Press/Contact email accounts are informed and forward any inquiries about potential fake accounts to the Security team.
• Warnings on official sites and social media accounts.
• Ideally find someone in the org who is willing and able to automate the processes above.

@p0lr Depending on the size of the organization (read "security budget") and the scale of such attacks, a company can invest in a 3rd-party brand protection service.

There are services that monitor DNS, new domain registrations, public SSL certificate data, phishing campaigns and provide access to this intelligence through nice dashboards. Additionally they can assist with take-downs of infringing parties and infrastructure.

Hunting brand infringement and impersonation actors can become a full-time job. Not only it takes up resources from a Security team, Legal teams often also need to be involved -at minimum for formulating proper language in take-down notices.

@hal_pomeranz

sudo lsattr -laR / 2> /dev/null | grep Immutable