It depends on the legal jurisdiction you and your registrar (or possibly the registry for the TLD) reside in I suppose. But in the U.S. the Anticybersquatting Consumer Protection Act (ACPA) specifically outlaws this type of trademark infringement and typosquatting. It's pretty much the only kind of domain squatting that is actually illegal in the U.S.
Under this law, the trademark holder can sue anyone who tries to profit from their trademark via a domain name that contains their trademark or a typo variant. The only exceptions are gripe sites, but the domain still has to be different enough from the trademark to not be misleading.
The other path of recourse trademark holders have is the Uniform Domain-Name Dispute-Resolution Policy (UDRP). The UDRP is a quicker process, and one that has a very high rate of success for trademark holders; however, many trademark holders choose to make an ACPA claim because it allows them to pursue punitive damages (in one case the trademark holder was awarded $200,000), whereas with UDRP they only get the domain name transfered over to them.