On: 37k Chrome users downloaded a fake Adblock Plus extension

[styfle]

Google should make the extension name case insensitive like domain names. That should help a little bit.

[marindez → styfle]

Then people will use cyrillic letters, etc. That approach simply does not work.

[styfle → marindez]

Yeah its a problem for domain names too: https://www.xudongz.com/blog/2017/idn-phishing/