Monday, June 11, 2018

How to defend against homoglyph attack (Recently happened to Whatsapp users)


Chrome:
Install Phish.ai's extension - Helps by showing a big red window every time the user is attempting to access a domain containing Unicode characters

Firefox:
Firefox users, can enable homograph attack detection by enabling "IDN_show_punycode" inside about:config

https://www.tripwire.com/state-of-security/featured/whatsapp-users-targeted-by-homoglyph-attack-peddling-free-tickets-to-theme-park/

No comments:

Post a Comment