I have just received this email:

Fог уоuг ргоtесtіоn, уоuг Αррlе ID іѕ аutоmаtісаllу disabled. 

Wе hаνе ргеνеntеd аn unuѕuаl ѕіgn іn аttеmрt оn уоuг Αррlе ассоunt.Тhіѕ ассоunt hаѕ Ьееn lоскеd Ьесаuѕе ѕіgnіng іn fгоm а nеw lосаtіоn ог fгоm а dіffегеnt dеνісе. Рlеаѕе геνіеw thе ѕіgn іn dеtаіlѕ Ьеlоw: 

Υоuг ассоunt ассеѕѕ hаѕ Ьееn lоскеd fог thе fоllоwіng геаѕоn(ѕ):
Wе сhеск уоuг ассоunt lоgіn wіth оthег dеνісе.
Υоuг ассоunt hаѕ Ьееn lоскеd untіl thіѕ іѕѕuеd hаѕ Ьееn геѕоlνеd, wе wіll wаіtіng fог 1 wеек ог уоuг ассоunt hаѕ Ьееn lоскеd регmаnеntlу.
Whаt tо dо Νехt: 
Рlеаѕе Сlіск thе lоgіn Ьuttоn Ьеlоw tо уоuг Αррlе ассоunt аnd ргоνіdе thе геquеѕtеd іnfогmаtіоn Ьеfоге 1 wеек. Тhгоugh thе ассоunt геνіеw, іf wе dоn't гесеіνеd thе іnfогmаtіоn Ьеfоге thіѕ dеаdlіnе, уоuг ассоunt ассеѕѕ wіll Ье lоскеd регmаnеntlу.

Why are these letters used: Ь, ν, к? It makes easier to detect that the message is not genuine.

2 Answers 2


This is probably for avoiding automatic spam detection, which is often based on the existence of keywords like locked. And locked won't match lоскеd so the spam filter lets the mail go through, and inattentive users might get tricked.

They also use the cyrillic letters in URLs because they often are non-already taken domains (free to be bought by the spammer) and they look-like the legitimate URL to users, so they often end up leaving their credentials of lucky.com to the phising website luскy.com


Hackers use 'Unicode Tricks/Cyrillic characters' to hide their motives and to be undetectable by security defenses/scanners.

Please refer below article for more details on this scenario:


  • That explains the usage of these characters inside an URL (as I stated), but not inside normal mail text like there.
    – Xenos
    Jun 28, 2018 at 12:42
  • Believe scenario for both are same. Escaping from detection...
    – Sayan
    Jun 28, 2018 at 12:46
  • 1
    Not really IMO since in the URL, the goal is clearly to be unspotted by users (no care about automatic anti-spam) while in the email, the real goal is to bypass automatic antispam scanner (no matter whether humans could spot the different looking "k")
    – Xenos
    Jun 28, 2018 at 13:11
  • I too mention detection engine and could be human as well...
    – Sayan
    Jun 28, 2018 at 14:54
  • @Sayan you repeat some of what the other answer did and posted a link with the potential to add more details. But you do not supply those details yourself. When answering please offer unique value.
    – schroeder
    Jun 28, 2018 at 15:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .