Hackers abuse lookalike domains and favicons for credit card theft using a variation of older Magecart technique. This time they throw in homograph domains.