Google Chrome will soon save you from misspelled look-alike URLs

By Arif Bacchus Published January 30, 2019

Image used with permission by copyright holder

With phishing attacks, email scams, and malware, the web can be quite a dangerous place. Well, Google is out to save you from some of the trouble. It is adding a feature to the popular Chrome web browser which will warn you about misspelled lookalike URLs that intend to imitate real websites, according to a report from ZDNet.

The feature is currently being beta tested in Google Chrome Canary 70 and can be enabled by using the chrome://flags/#enable-lookalike-url-navigation-suggestions flag. Once it is selected, Chrome will show a warning message under the Ombnibar and a new suggestion will appear, if you happen to type in the URL of a website which it determines is bogus or known to steal login credentials or imitate other authentic services.

Recommended Videos

As an example, ZDNet suggests that fake websites can include instances such as paypall.com, or coịnbạse.com. However, in our testing, the standard version of Google Chrome already automatically redirects paypall.com to the legit PayPal website.

This same flag can also be found on standard non-beta versions of Google Chrome but doesn’t appear to work as it does in the Canary ring. That suggests that the feature isn’t quite ready just yet, and might officially be coming in a future release. Emily Stark, a member of Google’s usable security team also demonstrated the feature during a recent presentation focused on web security.

This wouldn’t be the first security-themed feature that Google has pushed out to the Chrome web browser. Recently, Google attempted to fight websites which hijack your back button and tab history to generate views on advertisements. Google is also on a mission to fight phishing and recently released a quiz which attempts to educate internet users on how to avoid getting attacked.

As always, when browsing the web, it is best to keep careful and manually verify all URLs you visit, but it is nice to see that Google Chrome will now automatically help out. Typically, you should also check to see if there is a green lock next to the URL, as this will alert you to secure connections, site certificates, and other web settings.

Former Computing Writer

Arif Bacchus is a native New Yorker and a fan of all things technology. Arif works as a freelance writer at Digital Trends…

Topics

Computing

As AI turbocharges digital abuse, UK agencies urge parents to limit who sees kids’ photos online

The National Crime Agency and Internet Watch Foundation are asking parents to tighten privacy settings as AI-generated abuse material rises.

Parents who post pictures of their kids online are being told to rethink the habit. The UK's National Crime Agency and the Internet Watch Foundation have issued new guidance urging families to lock down their social media accounts, warning that publicly shared photos are increasingly being pulled and altered by AI tools to create child sexual abuse material.

The two organizations say most parents have no idea this is happening. Criminals no longer need to contact a child directly to generate such material. They can scrape an ordinary photo and run it through widely available nudify apps.

Computing

I used ASUS’ dual-screen laptop as a portable creative station, and my desk PC started collecting dust

The Zenbook Duo might be the creator setup I wanted in college

Computer Hardware, Electronics, Hardware

With laptops, brands are constantly in a balancing act between portability and workspace productivity. The ASUS Zenbook Duo UX8407AA tries to dodge that choice with a design that brings a whole setup in a compact form factor.

I used the Zenbook Duo as a creative machine, mainly with design apps, illustration work, writing, and multitasking. The model I tried runs on Intel’s Core Ultra 7 355, paired with 32GB of memory and a 1TB SSD. That gives it enough horsepower to handle Photoshop and Animate, for sketches and animations, and a lot more without breaking a sweat.

Computing

macOS clipboard app Maccy has a fake out there stealing passwords

PamStealer malware is disguising itself as Maccy to target Mac users

Depicting of the Maccy clipboard app for macOS on a laptop with letters inb the background.

A fake version of Maccy, a popular clipboard manager for macOS, is being used to deliver a newly discovered Mac malware strain called PamStealer. Researchers at Jamf say the malware impersonates the real open-source app, but its actual purpose is to steal data and capture a victim’s login password.

PamStealer arrives as a disk image containing an AppleScript file that impersonates Maccy. Once the user opens that file, macOS launches it in Script Editor, where the on-screen instructions tell them to press Command-R. To someone expecting a normal app installer, that may look like an odd setup step. In reality, that action runs hidden malware code and starts the attack.