Attacker Techniques: Gesture Jacking

stapp · Apr 3, 2024

A recent blog post by security researcher Paulos Yibelo clearly explains a class of attack whereby a user is enticed to hold down a key (say, Enter) and that gesture is treated as both an acceptance of a popup window and results in activating a button on a target victim website. If the button on that website performs a dangerous operation (“Grant access”, “Transfer money“, etc), the victim’s security may be irreversibly compromised.
Click to expand...

https://textslashplain.com/2024/03/27/attacker-techniques-gesture-jacking/

(the author of this site created Fiddler and SlickRun)

Log in or Sign up

Attacker Techniques: Gesture Jacking

stapp Global Moderator

Log in or Sign up

Attacker Techniques: Gesture Jacking

stapp Global Moderator

Useful Searches