Australian Cyber Security Centre (ACSC) has advised business owners to move to shorter domain names immediately, as priority allocations for the transfer of existing domains come to an end tomorrow.
With domain names ending with .au now available, businesses are encouraged to change their.com.au, .net.au, or .org.au domains to shorter domain names.
The ACSC has warned businesses of the potential of cyber-attacks if they do not claim their priority allocations.
It said: “Opportunistic cybercriminals could register your .au domain name in an attempt to impersonate your business.”
If no priority applications have been made for the .au direct match, the domains will become available for registration to the general public, making them susceptible to being picked up by cybercriminals.
Small businesses are encouraged to reserve their .au equivalent domain name before 20 September 2022 in an effort to reduce the likelihood of cybercriminals impersonating their businesses.Learn more about .au domain name changes at https://t.co/lRKaCJmIxV https://t.co/adcToweUw9
— Australian Cyber Security Centre (@CyberGovAU) August 29, 2022
Small businesses are not aware
Stressing the importance of the domain change, Australian small business and family enterprise ombudsman Bruce Billson said: “It is critical to act now to make sure you are not caught short by the introduction of the shortened .au domain name.”
“Unfortunately, hardly any small businesses I've met are aware this big change is taking place.
“But the consequences for a small or family business could be massive if impersonators, web-name ‘squatters’ or cyber criminals take up domain names just like theirs.”
@BillsonBruce has implored Indigenous small businesses to take urgent action to safeguard their brand and identity on the internet or risk seeing impersonators, web-name ‘campers’ or cyber criminals take up domain names just like theirs.????????https://t.co/QnGsvXfYIu #SmallBizAU pic.twitter.com/Df59tusnOP
— ASBFEO (@ASBFEO) August 24, 2022
Who is eligible?
Anyone with an Australian presence, which includes businesses, associations and individuals will be eligible for a new category of domain names.
These shorter simpler domain names will end in .au rather than .com.au, .net.au, .org.au, .gov.au or .edu.au.
All Australian businesses will have until September 20 to reserve their .au equivalent domain name, then it becomes available to the general public.
How do I protect myself?
Simply put, the only way to mitigate the threat is to purchase the shorter domain name for your business before the due date which is tomorrow.
For example, if you have currently registered yourbusiness.com.au, a cybercriminal could register yourbusiness.au or yourbusinesscom.au and use these domains to conduct fraudulent cyber activities.
One can reserve the .au domain name by visiting an auDA accredited registrar.
Billson adds: “If you don’t get control of the .au version of your domain name, a cybercriminal masquerading as you could try to reach your customers to harvest personal information, even intercept invoices so that they can substitute different bank account details.
“With all the challenges small business owners and leaders are facing now, the last thing anyone needs is someone ripping off their domain name.”
“The awareness campaign by the non-government regulator has been underwhelming,” said Billson.