IDN homograph attack (English Wikipedia)

Suzuki, Hiroaki; Chiba, Daiki; Yoneya, Yoshiro; Mori, Tatsuya; Goto, Shigeki (2019-10-21). "ShamFinder: An Automated Framework for Detecting IDN Homographs". Proceedings of the Internet Measurement Conference. New York, NY, USA: ACM. pp. 449–462. doi:10.1145/3355369.3355587. ISBN 978-1-4503-6948-0.

github.com

"IDN Homographs Database". GitHub. 25 September 2021.

googlesource.com

chromium.googlesource.com

"Internationalized Domain Names (IDN) in Google Chrome". chromium.googlesource.com. Retrieved 2020-08-26.

hkdnr.hk

There are various Punycode converters online, such as https://www.hkdnr.hk/idn_conv.jsp

icann.org

IDN ccTLD Fast Track String Evaluation Completion Archived 2014-10-17 at the Wayback Machine

kboi2.com

Fake website URL not from KBOI-TV Archived 2011-04-05 at the Wayback Machine. KBOI-TV. Retrieved 2011-04-01.

ktvb.com

Boise TV news website targeted with Justin Bieber prank Archived 2012-03-15 at the Wayback Machine. KTVB. Retrieved 2011-04-01.

mozilla.com

"Firefox 2 Phishing Protection". Mozilla. 2006. Retrieved 2006-11-30.

mozilla.org

wiki.mozilla.org

"IDN Display Algorithm". Mozilla. Retrieved 2016-01-31.

bugzilla.mozilla.org

"Bug 722299". Bugzilla.mozilla.org. Retrieved 2016-01-31.

msdn.com

blogs.msdn.com

Sharif, Tariq (2006-07-31). "Changes to IDN in IE7 to now allow mixing of scripts". IEBlog. Microsoft. Retrieved 2006-11-30.
Sharif, Tariq (2005-09-09). "Phishing Filter in IE7". IEBlog. Microsoft. Retrieved 2006-11-30.

opera.com

blogs.opera.com

"Upcoming update with IDN homograph phishing fix - Blog". Opera Security. 2017-04-21. Retrieved 2020-08-26.

opera.com

"Opera Fraud Protection". Opera Software. 2006-12-18. Retrieved 2007-02-24.

shmoo.com

IDN hacking disclosure by shmoo.com Archived 2005-03-20 at the Wayback Machine

soluble.ai

Emoji to Zero-Day: Latin Homoglyphs in Domains and Subdomains Archived 2020-12-09 at the Wayback Machine

technion.ac.il

cs.technion.ac.il

Evgeniy Gabrilovich and Alex Gontmakher, "Archived copy" (PDF). Archived from the original (PDF) on 2020-01-02. Retrieved 2005-12-10.{{cite web}}: CS1 maint: archived copy as title (link), Communications of the ACM, 45(2):128, February 2002

threatpost.com

Mimoso, Michael (2017-09-06). "IDN Homograph Attack Spreading Betabot Backdoor". Threatpost. Archived from the original on 2023-10-17. Retrieved 2020-09-20.

unicode.org

"Unicode Security Considerations", Technical Report #36, 2010-04-28

web.archive.org

Evgeniy Gabrilovich and Alex Gontmakher, "Archived copy" (PDF). Archived from the original (PDF) on 2020-01-02. Retrieved 2005-12-10.{{cite web}}: CS1 maint: archived copy as title (link), Communications of the ACM, 45(2):128, February 2002
Cory, Doctorow (2005-02-06). "Shmoo Group exploit: 0wn any domain, no defense exists". Boing Boing. Archived from the original on 2015-09-27. Retrieved 2024-10-28.
IDN hacking disclosure by shmoo.com Archived 2005-03-20 at the Wayback Machine
".CA takes on a French accent | Canadian Internet Registration Authority (CIRA)". Archived from the original on 2015-09-07. Retrieved 2015-09-22.
Fake website URL not from KBOI-TV Archived 2011-04-05 at the Wayback Machine. KBOI-TV. Retrieved 2011-04-01.
Boise TV news website targeted with Justin Bieber prank Archived 2012-03-15 at the Wayback Machine. KTVB. Retrieved 2011-04-01.
Mimoso, Michael (2017-09-06). "IDN Homograph Attack Spreading Betabot Backdoor". Threatpost. Archived from the original on 2023-10-17. Retrieved 2020-09-20.
IDN ccTLD Fast Track String Evaluation Completion Archived 2014-10-17 at the Wayback Machine
Emoji to Zero-Day: Latin Homoglyphs in Domains and Subdomains Archived 2020-12-09 at the Wayback Machine

wordfence.com

"Chrome and Firefox Phishing Attack Uses Domains Identical to Known Safe Sites". Wordfence. 2017-04-14. Retrieved 2017-04-18.
Chrome and Firefox Phishing Attack Uses Domains Identical to Known Safe Sites

worldcat.org

search.worldcat.org

CHIBA, Daiki; AKIYAMA HASEGAWA, Ayako; KOIDE, Takashi; SAWABE, Yuta; GOTO, Shigeki; AKIYAMA, Mitsuaki (2020-07-01). "DomainScouter: Analyzing the Risks of Deceptive Internationalized Domain Names". IEICE Transactions on Information and Systems. E103.D (7): 1493–1511. doi:10.1587/transinf.2019icp0002. ISSN 0916-8532.
Safaei Pour, Morteza; Nader, Christelle; Friday, Kurt; Bou-Harb, Elias (May 2023). "A Comprehensive Survey of Recent Internet Measurement Techniques for Cyber Security". Computers & Security. 128: 103123. doi:10.1016/j.cose.2023.103123. ISSN 0167-4048.

xudongz.com

Phishing with Unicode Domains