TLDR InfoSec · ATTACKS & VULNERABILITIES
BOOKING.COM PHISHING CAMPAIGN USES SNEAKY 'ん' CHARACTER TO TRICK YOU
Summary from the TLDR InfoSec newsletter
Attackers are using the Japanese hiragana character 'ん' (n) in phishing domains to impersonate Booking.com, creating URLs that appear legitimate but redirect victims to credential-stealing sites. The campaign exploits how the character renders similarly to the Latin 'n' in many fonts, making malicious domains harder to detect. Users should verify URLs carefully and avoid clicking links in unsolicited emails claiming to be from Booking.com.