This weird trick lets hackers hide phishing URLs
Some perfectly authentic looking web addresses are not what they seem and not all browsers are taking the problem seriously
Here's a challenge for you: you click on a link in your email, and find yourself at the website https://DNNOD.com. Your browser shows the green padlock icon, confirming it's a secure connection; and it says "Secure" next to it, for added reassurance. And yet, you've been phished. Do you know how?
The answer is in that URL. It may look like it reads "apple", but that's actually a bunch of Cyrillic characters: A, Er, Er, Palochka, Ie. The security certificate is real enough, but all it confirms is that you have a secure connection to DNNOD.com - which tells you nothing about whether you're connected to a legitimate site or not.
Continue reading...