Phishing attack uses Unicode characters in domains to clone known safe sites

Re:Phishing attack uses Unicode characters in domains to clo... by userbinator on Saturday April 15, 2017 @07:44AM (#14120372)

This particular example was chosen such that the entire name was using the Cyrillic Unicode range:

https://en.wikipedia.org/wiki/Cyrillic_(Unicode_block)

From that, you can see domains composed exclusively of those characters with are homoglyphic or nearly so with the ASCII equivalents would be susceptible to this:

AaBCcEeFHhIiJjKMOoPpSsTXxY

That's not all the letters, but there are plenty of domains in English which can be written to look the same with entirely Cyrillic.

[ Parent | on HN ]

Re:Phishing attack uses Unicode characters in domains to clo... by hughdbrown on Saturday April 15, 2017 @11:46AM (#14121198)

When I generate all the English words that are in a UK dictionary that use the letters "acehijopsx" exclusively, and then test which are reachable domains, I come up with only about 500. Other than epic.com, the most significant ones are chase.com, sap.com, soap.com and sex.com, I think.

[ Parent | on HN ]