As cited
Copy frozen at (site build).
threat intel
Two characters open up a world of typosquatting opportunities in Chromium browsers
Researchers discovered that two special characters, the Cyrillic ө and Latin ƙ, can be used to register domain names that appear legitimate in Chromium browsers despite using homoglyph characters. The characters bypass two key security mechanisms: Chromium's SafeToDisplayAsUnicode function, which relies on a hardcoded list of known lookalike characters, and the GetSimilarTopDomain() function, which strips diacritics to check against popular websites. Analysis of all .com domains identified approximately 162,000 internationalized domain name pairs that could resemble ASCII domains, creating a substantial pool of potential typosquatting opportunities.
Why it matters: Organizations and individual users of Chrome and Edge are vulnerable to phishing via visually convincing homoglyph domains that bypass browser protections; security teams should monitor domain registrations for suspicious internationalized domain names and consider email filtering rules that display Punycode for suspicious IDNs.
- Source published
- First seen by Cybersecurity Tracker