This shows the problems with unicode in domain names. Some Cyrillic characters look exactly like Latin characters but have different codepoints, e.g. a (0x61) and а (0xB0D0). This is pretty important for businesses whose domain include an a, like banks.

Google is now noticing that those malicious domains don't even have to be an exact visual match but a similar looking one is sufficient to trick users.