Windows 7: Devious New Phishing Tactic Targets Tabs

Devious New Phishing Tactic Targets Tabs

Many Internet users know what a regular phishing attack looks like, where an email comes in with a link asking you to click it and enter your credentials into a fake site meant to steal that info. What about a sneaky one that exploits user inattention to their browser tabs?

Reported on the blog Krebs on Security a new phishing attack was invented recently where the unattended tabs left open in your browser will be changed with a JavaScript code embedded in the website. The tab’s favicon and title will be changed to look like a frequently visited site and the tab content will be changed to a fake version of that website. The point is to trick the user into thinking they left that site open and got logged out and they will want to re-enter their login information.



Devious New Phishing Tactic Targets Tabs | Technibble

Good link Nigel. that is so dangerous.
especially this

The proof of concept is benign but it shows how the phishing and malware "industry" is now using the way we surf the net to trap the unwary - this sort of social engineering is on the rise and is something to watch

Repost.

Good to let as many people as possible know, though.

yes, Corrine already posted about it a week ago...

i suggest this thread to be closed / combined with Corrine´s.