It’s been known for a long while that people can use similar-looking non-Roman characters to create internet addresses that look similar to real ones.
These dishonest URLs have been doing the rounds for years. And, sadly, the abuse of homographs to craft dodgy web addresses continues well into this day, according to security researchers.
In an extensive review of top brands – including: tech companies like Apple, Google, Facebook; banks and cryptocurrency burgs like Bank of America, Poloniex and Coinbase; and sites like the New York Times, Wikipedia and Walmart – Farsight Security discovered that scammers had gone to some lengths to register domains that like similar to the real thing in an attempt to phish unsuspecting internet users.
In the worst cases, the researchers found websites masquerading as Facebook.com and Poloniex.com – and encouraging users to login, and the presumably storing their details to use later.
Read full news article on The Register