Master the Matrix

Cybercriminals Exploit Unicode Trick to Mimic Booking.com in Phishing Scam Threat actors have launched a new phishing campaign targeting Booking.com users , leveraging Unicode characters to disguise malicious links as legitimate ones. This attack shows how easily scammers can trick people with subtle visual deceptions. How the Attack Works The campaign uses the Japanese hiragana character “ん” (Unicode U+3093) inside phishing URLs. On some systems and fonts, this symbol looks like a forward slash (/) or part of a subdirectory, making the fake URL appear genuine. For example, a phishing email may display the link (appears safe but is deceptive): https://admin.booking.com/hotel/hoteladmin/... But the actual malicious hyperlink is different (neutralized below for safety): https://account.booking.comんdetailんrestric-access.www-account-booking[.]com/en/ At first glance, it looks like a real Booking.com page. In reality, the true registered domain is “www-account-booking[.]co...