The Ηоmоgraph Illusion: Not Everything Is As It Seems

This Unit 42 report examines active phishing campaigns that employ Unicode homograph characters to impersonate legitimate brands and services (three case studies: Google Drive file sharing, e-signature/document review flows, and Spotify payment notifications), describes observed IOCs (sender addresses and URLs), explains detection via Unicode/script analysis, and recommends mitigation and product-based protections to prevent credential theft and related exploitation.