Tabnabbing

RCGuy · Dec 31, 2010

Has anyone heard of Tabnabbing? I just learned about it yesterday.

Mozilla's Aza Raskin is warning about a new type of phishing attack called tabnabbing.
Unlike traditional phishing attacks which trick people into clicking on links that take them to bogus sites that look legitimate, tabnabbing doesn't require a user to click on a link. But it too can trick people into disclosing their usernames and passwords.
While you're visiting a Web page infected with malicious tabnabbing code, a tab in the background morphs into what appears to be a legitimate site like Gmail or a banking site. To the user it looks quite familiar and since it's not uncommon for people to have multiple tabs open at the same time, it's easy to assume that it really is the site you want to visit. When you click on it, you're not logged in, but that too can seem quite normal since many sites log you out automatically after a period of time. However, if you're a tabnabbing victim and try to log in to the site, you wind up giving your log-in credentials to the tabnabber
Click to expand...

http://news.cnet.com/8301-19518_3-20007518-238.html

Also, here's an article that has a link in it that demonstrates a tabnabbed page:

http://www.tuaw.com/2010/06/01/protect-your-browser-from-tabnabbing/

And here's a YouTube video about it:

http://www.youtube.com/watch?v=9pKUzRRI8IM

Pretty sneaky stuff, I would say.

BG · Dec 31, 2010

Wonder if a 64bit browser would be safe?

Cudni · Dec 31, 2010

Good read. Thanks
+
tips on how to deal with it
http://www.computerworld.com/s/article/9177398/How_to_foil_Web_browser_tabnapping_

Log in or Sign up

Tabnabbing

RCGuy Registered Member

BG Registered Member

Cudni Global Moderator

Log in or Sign up

Tabnabbing

RCGuy Registered Member

BG Registered Member

Cudni Global Moderator

Useful Searches