Edward Kiledjian's Threat Intel

Booking.com phishing campaign uses sneaky ‘ん’ character to trick you www.bleepingcomputer.com/news/secu…

Threat actors are leveraging a Unicode character to make phishing links appear like legitimate Booking.com links in a new campaign distributing malware.

The attack makes use of the Japanese hiragana character, ん, which can, on some systems, appear as a forward slash and make a phishing URL appear realistic to a person at a casual glance.

BleepingComputer has further come across an Intuit phishing campaign using a lookalike domain using the letter L instead of ‘i’ in Intuit.