Two characters open up a world of typosquatting opportunities in Chromium browsers
ID: a27dea4b-ee92-5d49-9922-042a80fde2ea
STIX ID: report--a27dea4b-ee92-5d49-9922-042a80fde2ea
Feed Name: The Register (Security)
Threat Score
Researchers from Have I Been Squatted show that two characters (Cyrillic 'ө' and Latin 'ƙ') can evade Chromium's IDN spoofing protections and make typosquatted domains appear as legitimate Unicode URLs; they registered 20 demo domains, detail how Chromium’s SafeToDisplayAsUnicode and skeleton checks are bypassed, and highlight limits in Safety Tips and inconsistent handling by email clients, increasing phishing risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.