Microsoft typosquatting scam swaps letters to steal logins

A new phishing campaign is exploiting a visual trick that is easy to miss and hard to unsee once you know it. Attackers are using the domain rnicrosoft.com to impersonate Microsoft and steal login credentials. The trick is simple. Instead of the letter m, scammers place r and n side by side. In many fonts, those letters blur together and look almost identical to an m at a quick glance.

Security experts are sounding the alarm because this tactic works. These emails closely copy Microsoft branding...