The Phish.AI extension for Google Chrome prevents the user from falling into a homographic coup and provides data for criminals. This attack happens when the person enters a fake website, but with a look and address very similar to the real one. Bandits exchange a letter in the URL for a special character, or similar ones, such as "m" for "rn", for example. When using the counterfeit website, users fill out forms with personal and bank details for malicious people.
The Phish.AI plugin can be installed free of charge in the browser and detects malicious links as soon as the user clicks on a URL that contains some Unicode character. To avoid this problem and not have your personal data stolen, see how to install the extension.
Homographic attack: trick in the URL deceives users with fake pages
False back of MercadoLivre website with changed letters Photo: Reproduo / ESET
Step 1. Access the Phish.AI download page and click "Access". J in the Chrome Web Store, click the "Use in Chrome" button;
At the Chrome Web Store, click "use on Chrome" to download the extension Photo: Reproduo / Marvin Costa
Step 2. Click "Add extension" to have the tool installed on Chrome.
By downloading and installing the Google Chrome Phish.Al extension Photo: Reproduo / Marvin Costa
From that moment, the extension will be enabled and automatically block sites that contain suspicious characters. If you access any of these malicious links, the following warning should appear in the window.
Notice of extension of homograph stroke Photo: Divulgao / Phish.Ai
Take advantage of the tip to browse the Internet more safely.