Attackers are tricking computer users with URLs that are similar to those of real companies.