They need to up their game to cover internationalized homograph vulnerabilities, using roughly similar characters from different international alphabets to create totally different domain names:
I do have a tendency to check where the link leads before clicking on it, so the difference between those two is quite obvious to me: http://example.com/ vs http://xn--exmple-4nf.com/, but a lot of people probably do not do that.
Kemming is 100 level preparedness.
They need to up their game to cover internationalized homograph vulnerabilities, using roughly similar characters from different international alphabets to create totally different domain names:
example.com
exаmple.com
They look identical but are entirely different.
https://en.wikipedia.org/wiki/IDN_homograph_attack
I do have a tendency to check where the link leads before clicking on it, so the difference between those two is quite obvious to me:
http://example.com/vshttp://xn--exmple-4nf.com/, but a lot of people probably do not do that.I would definitely not click on the second one.
Well that’s just rude