Blog | G5 Cyber Security

Chrome, Firefox, and Opera users vulnerable to Unicode domain phishing attacks

Attackers can evade a security mechanism and abuse Unicode domains to phish for the login credentials of Chrome, Firefox, and Opera users. Security researcher Xudong Zheng has developed a proof-of-concept that exploits an issue in some web browsers. The attack exploits the fact that characters used in a single or multiple writing systems look similar to one another when displayed by web browsers. For instance, a Latin C looks similar to a Cyrillic C, while just in the Latin alphabet alone, two uppercase is look the same as two lowercase l’s”]

Source: https://grahamcluley.com/chrome-firefox-opera-users-vulnerable-unicode-domain-phishing-attacks/

Exit mobile version