Free Republic

Experts: International domain names may pose threat The new trick is a variation of the 'homograph attack' The new trick is a variation of a known technique called the "homograph attack" and takes advantage of loopholes in the way some popular Web browsers display domain names that use non-English characters. It could allow malicious hackers and online identity-theft groups to trick unsuspecting users into divulging sensitive personal information, according to an advisory from The Shmoo Group, a hacker collective, and from Secunia. snip For example, attackers could register a Web domain "bloomberg.com," which looks identical to the popular business news...

New Browser Trick FoundUses homograph attack to spoof links As members of our Security forum discuss, a new homograph browser trick (see demo page) has been discovered that oddly works in every browser but IE. The trick uses International Domain Name (IDN) character support (using foreign characters that resemble American alphabet letters) to trick your browser into showing fake domain names in hyperlinks and in the address bar. IE doesn't support IDN (though it can via plug-in), so by default isn't vulnerable. More detail in this advisory from the group that discovered it.