New attack scam on GitHub and Co.: character swapping with Unicode in URLs When attackers replace letters in URLs with Unicode characters that look the same, this is difficult to detect.