The idea consists of using characters that look the same in order to dupe users. Sometimes the characters are from a different language set or simply capitalizing the letter ‘i’
to make it appear like a lower case ‘l’. A threat actor with ties pointing to Magecart group is using this technique on several domain names to load the popular Inter skimming kit inside of a favicon file.
Learn more >