Scworld

Tirith Tool Launches to Combat Homoglyph Attacks in Command Line

First seen 10 Feb 2026, 08:25 UTC • Bleepingcomputer

•35.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The open-source tool Tirith has been launched to detect homoglyph attacks in command-line environments. By analyzing URLs in typed commands, it prevents execution of deceptive commands that use similar-looking characters from different alphabets. Tirith integrates with popular shells including zsh, bash, fish, and PowerShell.

How this analysis works

Timeline

2026-02-08

Bleeping Computer reports on Tirith tool release

2026-02-10

Scworld publishes article on Tirith tool functionality

Attack Flow

11 entities, 9 inferred relationships (STIX 2.1).

Technique (7)

Phishing
T1055 - Process Injection
T1059.001 - PowerShell
T1059.004 - Unix Shell
T1195 - Supply Chain Compromise
T1566.002 - Spearphishing Link
T1574 - Hijack Execution Flow

Affected Platform (1)

Fish

Tool (3)

Bash
zsh
PowerShell

Relationships

Phishing targets Fish
T1055 - Process Injection targets Fish
T1059.001 - PowerShell targets Fish
T1059.004 - Unix Shell targets Fish
T1195 - Supply Chain Compromise targets Fish
T1566.002 - Spearphishing Link targets Fish
T1574 - Hijack Execution Flow targets Fish
Bash related to zsh
Bash related to PowerShell

Continue Reading

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Critical Remote Code Execution Vulnerability Exploited by China-Nexus Actor Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies DarkSword iOS Exploit Chain Targets Mobile Devices Globally Armored Likho APT Targets Power Grids with BusySnake Stealer Malware Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

Tirith Tool Launches to Combat Homoglyph Attacks in Command Line

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading