A sophisticated phishing campaign is currently leveraging a subtle typographical trick to bypass user vigilance, deceiving victims into handing over sensitive login credentials. Attackers utilize the domain “rnicrosoft.com” to impersonate the tech giant.
By replacing the letter ‘m’ with the combination of ‘r’ and ‘n’, fraudsters create a visual doppleganger that is nearly indistinguishable from the legitimate domain at a casual glance.
This technique, known as typosquatting, relies heavily on the font rendering used in modern email clients and web browsers.
Hackers Replace 'm' with 'rn' in Microsoft(.)com to Steal Users' Login Credentials
https://cybersecuritynews.com/microsoft-phishing-replace-m-with-rn/
33 Comments
0ops@piefed.zip · 71 pts · 270d
Shitty keming strikes again
TomMasz@piefed.social · 6 pts · 270d
Good typography saves lives.
msfroh@lemmy.ca · 62 pts · 270d
I can't wait for the .corn TLD.
hemko@lemmy.dbzer0.com · 49 pts · 270d
I'm kinda surprised Microsoft hasn't bought that domain long time ago... That trick is like decades old
Railcar8095@lemmy.world · 39 pts · 270d
On the one hand, it can help mitigate phishing attacks that could cost millions. On the other hand, rnicrosoft would have to spend 20 pounds in something not AI related.
Surely you can see why it's not an easy solution.
Devils advocate: it's not their responsibly to prevent third parties impersonating them. But it would be pretty damm nice if they did.
tankplanker@lemmy.world · 9 pts · 270d
You would think it would be an easy up-sell by the domain registrars to offer sound and look a like domains when you registering and renewing your domain
lauha@lemmy.world · 7 pts · 270d
That would assume they care about their users
gndagreborn@lemmy.world · 2 pts · 270d
@GROK WHAT IS KERNING???
Zachariah@lemmy.world · 38 pts · 270d
!keming@lemmy.world
Cyber@feddit.uk · 9 pts · 270d
Kerning or Keming?
But thanks for the link had a good "lol" from those (few) posts.
frongt@lemmy.zip · 7 pts · 270d
Kerning when it's good, keming when it's bad.
eestileib@lemmy.blahaj.zone · 28 pts · 270d
Ye olde homograph attack.
chris@programming.dev · 30 pts · 270d
Ye olde hornograph attack, you mean…
i_dont_want_to@lemmy.blahaj.zone · 12 pts · 270d
We're cooked
eestileib@lemmy.blahaj.zone · 8 pts · 270d
These hœs ain't loya1.
frongt@lemmy.zip · 11 pts · 270d
Technically no, since it's different characters. This is keming.
nocturne@piefed.social · 1 pts · 270d
Þe olde
Kissaki@programming.dev · 24 pts · 270d
rnicrosoft.corn🌽IndustryStandard@lemmy.world · 6 pts · 270d
pom.corn
Kissaki@programming.dev · 2 pts · 269d
I expect some hot Java code on that website 😏
ulterno@programming.dev · 11 pts · 270d
Another reason to Iike rnonospace fonts.
Cyber@feddit.uk · 10 pts · 270d
Back to monospaced fonts then.
trk@aussie.zone · 7 pts · 270d
Honestly not a bad idea for things like filenames and URLs.
I'll go variable width fonts, with it without serifs, for a wall of text... But for something short and critical I want to trust what I'm seeing.
Also bring back the line through 0s so you know it's a number.
ulterno@programming.dev · 2 pts · 270d
l also replaced 'I's with 'l's and vice-versa in some of my previous comments and haven't yet seen anyone react to them.
Hopefully someone finds out the ones I did today.
Cyber@feddit.uk · 2 pts · 270d
Well, here's 1, l spotted:
l also replaced 'I's with 'l's and vice-versa in some of my previous comments and haven't yet seen anyone react to them. Hopefully someone finds out the ones I did today.l did something simiIar in my original repIy, but it Iooked too weird, so gave up.
(0r did l?)
samus12345@sh.itjust.works · 8 pts · 270d
"Hackers?" Has the meaning really degraded so much that this is considered hacking?
Sunsofold@lemmings.world · 5 pts · 270d
What is old is new again.
kn33@lemmy.world · 2 pts · 270d
It feels like there's a lot wrong going on here but my sleeping pill is starting to kick in so if anyone wants me to explain my thoughts ask in the morning
Lilo@infosec.pub · 1 pts · 232d
I fell for this sort of scam last year, I lost all my life savings… thanks to my friend who linked me up with someone who helped me recover the money back
imetators@lemmy.dbzer0.com · -8 pts · 270d
I get a weird feeling about this. Like, you know... That is so stupid that I cant wrap my mind around it to understand how would it work. But then, I also understand that people are dumb and pay no attention to anything, mindlessly clicking "Accept all" on cookies and notification requests from shady websites.
BakerBagel@midwest.social · 6 pts · 270d
You were up late last night because your kid was sick, but you still had to be up at 5:30 to take your other kid to day care before driving an hour to work. You get to the office and it looks like your computer had an update last night and so you need to verify your login credentials. You've been on about 4 hours of sleep a night for the past week and just want to get on with your day.
People are overworked and exhausted, so stuff like that is bound to work on someone
scintilla@crust.piefed.social · 5 pts · 270d
Fuck off with this shit. Get off your damn high horse and look at the fucking images. If you aren't aware people with vision problems exist I suggest you go talk to people IRL more. This is leaving aside the elderly who can have vision problems on top of likely being less tech aware than most younger people simply because it wasn't a thing when they were younger so it was never part of their life in the same way that it is for most under 50.
funkless_eck@sh.itjust.works · 0 pts · 270d
ulterno@programming.dev · 0 pts · 270d
It's not corn.
It's rnicrosoft.com
To do
corn, they would require a corn TLD.