Homograph Attack
Homograph attack happen characters from different scripts or alphabets that look similar to characters in another script are used to deceive users or systems. For instance, using Cyrillic characters that resemble Latin characters to create a domain name that looks legitimate but directs users to a malicious site. Homograph attack is a subset of Visual spoofing vulnerability.
Remediation
Use Punycode to represent Unicode characters using ASCII characters. This can assist users in detecting deceptive attempts.
Metadata
- Severity: low
- Slug: homograph-attack
CWEs
- 1007: Insufficient Visual Distinction of Homoglyphs Presented to User
- 290: Authentication Bypass by Spoofing