bleepingcomputer[.]com/news/security/chrome-firefox-and-opera-vulnerable-to-undetectable-phishing-attack/
This is basically the same idea that led many sites & forums to not allow shortened URL links -- click the link & you don't know where you're headed. Same goes for any link where you don't see the full URL on the web page or in an email -- in that case we rely on the integrity of the page or email, & that it's not been hacked or forged etc.
In this case they're relying on Unicode characters that look like those in the regular roman character set, so hovering over a link, then checking the address that shows up at the bottom left of Firefox for example, won't help.
Fixes are supposed to be on the way.
