192
Hackers Replace 'm' with 'rn' in Microsoft(.)com to Steal Users' Login Credentials
(cybersecuritynews.com)
Shitty keming strikes again
this post was submitted on 25 Nov 2025
192 points (99.5% liked)
cybersecurity
5183 readers
13 users here now
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Community Rules
- Be kind
- Limit promotional activities
- Non-cybersecurity posts should be redirected to other communities within infosec.pub.
Enjoy!
founded 2 years ago
MODERATORS
Good typography saves lives.
I can't wait for the .corn TLD.
I'm kinda surprised Microsoft hasn't bought that domain long time ago... That trick is like decades old
On the one hand, it can help mitigate phishing attacks that could cost millions. On the other hand, rnicrosoft would have to spend 20 pounds in something not AI related.
Surely you can see why it's not an easy solution.
Devils advocate: it's not their responsibly to prevent third parties impersonating them. But it would be pretty damm nice if they did.
You would think it would be an easy up-sell by the domain registrars to offer sound and look a like domains when you registering and renewing your domain
That would assume they care about their users
@GROK WHAT IS KERNING???
rnicrosoft.corn 🌽
pom.corn
I expect some hot Java code on that website 😏
Kerning or Keming?
But thanks for the link had a good "lol" from those (few) posts.
Kerning when it's good, keming when it's bad.
"Hackers?" Has the meaning really degraded so much that this is considered hacking?
Ye olde homograph attack.
Ye olde hornograph attack, you mean…
We're cooked
These hœs ain't loya1.
Technically no, since it's different characters. This is keming.
Þe olde
Another reason to Iike rnonospace fonts.
What is old is new again.
Back to monospaced fonts then.
Honestly not a bad idea for things like filenames and URLs.
I'll go variable width fonts, with it without serifs, for a wall of text... But for something short and critical I want to trust what I'm seeing.
Also bring back the line through 0s so you know it's a number.
l also replaced 'I's with 'l's and vice-versa in some of my previous comments and haven't yet seen anyone react to them.
Hopefully someone finds out the ones I did today.
Well, here's 1, l spotted:
l also replaced 'I's with 'l's and vice-versa in some of my previous comments and haven't yet seen anyone react to them. Hopefully someone finds out the ones I did today.
l did something simiIar in my original repIy, but it Iooked too weird, so gave up.
(0r did l?)
It feels like there's a lot wrong going on here but my sleeping pill is starting to kick in so if anyone wants me to explain my thoughts ask in the morning