Chrome, Firefox, and Opera Vulnerable to Undetectable Phishing Attack by Catalin Cimpanu.
From the post:
Browsers such as Chrome, Firefox, and Opera are vulnerable to a new variation of an older attack that allows phishers to register and pass fake domains as the websites of legitimate services, such as Apple, Google, eBay, and others.
Discovered by Chinese security researcher Xudong Zheng, this is a variation of a homograph attack, first identified by Israeli researchers Evgeniy Gabrilovich and Alex Gontmakher, and known since 2001.
…
This particular hack depends upon variant characters being available within one language set, which avoids characters from different languages (deemed phishing attempts).
To make this work, you will need a domain name written using Punycode (RFC 3492), which enables the writing of Unicode in ASCII.
There’s a task for deep learning, scanning the Unicode Code Charts for characters that are easy to confuse with ASCII characters.
If you have a link to such results, ping me with it.