A new phishing technique: browser-in-the-browser attack

Remember the first rule of anti-phishing protection? Check all URLs: a fake site is sure to have something wrong in the address bar. But cybercriminals have figured out how to get round this. We explain what a browser-in-the-browser attack is and how to spot a fake authentication window.
How to spot phishing and guard against it: kas.pr/zq1r.
What else to watch: • Building a Safer World
What else to read: kas.pr/j7z8.
#phishing #scam #security #tips

[@valentinstrock4372]

Holy s**t that is a genius methode but scary at the same time 😨😰
I mean when somebody is in an rush or need a product etc, the infos are gone..
THANKS for the "moving" advise!!!!!🙏🏻👍🏻👍🏻👍🏻

[@soundspark]

This attack has been used for years against Steam users.

[@relav6824]

is this comparable to clickjacking, but instead of clicking they have you enter in credentials?

[@henrytownshend8862]

What if we re on phone , we can't use the move to border method

[@r.n.dspectra1775]

Simply on phone usually it opens in a new tab but fake one won't...so on phone it's easier 👌

[@ReligionAndMaterialismDebunked]

True, somewhat. Haha. You can figure out the MFA. Also, zSecurity put out videos recently on this, and you can bypass all of that. Hehe :3

[@henrytownshend8862]

Ty