News for hackers. Stuff that matters.

A comment on “The ad is malicious, despite specifying the "bestbuy.com" domain clearly”.

Re:“The ad is malicious, despite specifying the "bestbuy.com... by asteadman on Monday January 16, 2017 @06:01PM (#13413809)
My guess is that it's using substituting one or more of the letters for some look-alike character out of the extended unicode character set. see: https://en.wikipedia.org/wiki/IDN_homograph_attack
[ Parent | on HN ]
Re:“The ad is malicious, despite specifying the "bestbuy.com... by devoply on Tuesday January 17, 2017 @01:24AM (#13415582)
ｂestbuy.com < homograph domain resolves apparently to the right domain.

Here is a generator you can fiddle with http://www.irongeek.com/homoglyph-attack-generator.php

Maybe you can find one.

[ Parent | on HN ]
Re:“The ad is malicious, despite specifying the "bestbuy.com... by itcrowd on Monday January 16, 2017 @09:55PM (#13414837)
There could also be an open redirect in bestbuy.com somewhere which is exploited
[ Parent | on HN ]