Reddit users recently noticed a new malicious campaign to impersonate WhatsApp Messenger users. Apparently, some hackers have been sending links to unsuspecting victims that supposedly lead to the official WhatsApp website (whatsapp.com), while in reality the links lead to the fake domain шһатѕарр.com.
Clicking on the link and one is presented with an invitation to trouble. Clicking redirects you to a fake website and offers an offer of an exciting app that can make messages colorful.
Users are asked to share the link with friends and groups on social networks, ostensibly to make sure the user is not a robot. For all these problems, victims are “gifted” with adware instead of colored “WhatsApp” messages.
However, what is certainly a relief, Google has already removed the app from the Chrome Store. This is not the first time that hackers have used international characters and Unicode domain names. Previously, google.com was converted to ɢoogle.com.
In April 2017, Chinese expert Xudong Zheng warned that Chrome, Firefox , and Opera are vulnerable to nearly undetectable phishing attacks,in which attackers can register fake domains that are seemingly indistinguishable from the real resources of Apple, Google, eBay, Amazon , and many other companies.
