Customer context: beware the homoglyph attack

This report describes a red-team homoglyph phishing test where attackers registered ạcmehome.com (using a Vietnamese ‘ạ’ instead of a Latin ‘a’) to impersonate acmehome.com. Expel detected the technique during a follow-up test by applying customer-context (CCTX) rules in their platform, demonstrating how content-driven detection and analyst tooling can mitigate homoglyph domain phishing risks and highlighting the broader threat homoglyphs pose to SOCs and brand protection.