Deception & Impersonation

Brand impersonation is when attackers mimic a trusted company (logo, language, UI) to get users to click, log in, or pay.

A homograph attack uses lookalike characters (often from different alphabets) to create a domain that visually resembles a trusted brand.

Malicious redirects send users through a chain of sites to hide the final destination—often ending in phishing, scams, or malware downloads.

Rogue browser notifications abuse the browser’s notification permission to spam users with scam alerts, fake security warnings, or phishing links.

Tabnabbing is a trick where a background tab changes into a fake login page, hoping the user returns later and enters credentials.

Typosquatting is when attackers register domains that look like a real brand but rely on typos or subtle differences to fool users.