Two Letters Are All It Takes to Fool Chrome - Why Lookalike Domains Still Slip Past Browser Security
Security researchers have found that two obscure characters - a Cyrillic barred letter and a hooked Latin letter - can trick Chromium-based browsers like Chrome and Edge into displaying fraudulent lookalike domains as if they were genuine. The flaw lets attackers register convincing imitations of trusted websites, including banks and major brands, that bypass the built-in checks browsers rely on to flag suspicious URLs - a fresh reminder that domain-based trust has limits.
