Researchers say two characters available to phishers can trick Chromium-based browsers into displaying lookalike URLs as genuine web addresses. The Register reports that attackers can abuse rare Cyrillic and Latin letters to impersonate popular websites.
The problem comes from how browsers decide to display certain non-ASCII characters in the address bar.
Source: theregister.com, reported 10-10. https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383