New Phishing Attack That Even Most Vigilant Users Could Fall For

guest · Feb 15, 2019

New Phishing Attack That Even Most Vigilant Users Could Fall For
February 15, 2019
https://thehackernews.com/2019/02/advance-phishing-login-page.html

Antoine Vincent Jebara, co-founder and CEO of password managing software Myki, told The Hacker News that his team recently spotted a new phishing attack campaign "that even the most vigilant users could fall for."

Generally, when you click "log in with Facebook" button available on any website, you either get redirected to facebook.com or are served with facebook.com in a new pop-up browser window, asking you to enter your Facebook credentials to authenticate using OAuth and permitting the service to access your profile’s necessary information.

As shown in the video demonstration Vincent shared with The Hacker News, the fake pop-up login prompt, actually created with HTML and JavaScript, are perfectly reproduced to look and feel exactly like a legitimate browser window—a status bar, navigation bar, shadows and URL to the Facebook website with green lock pad indicating a valid HTTPS.
Click to expand...

The only way to protect yourself from this type of phishing attack, according to Vincent, "is to actually try to drag the prompt away from the window it is currently displayed in. If dragging it out fails (part of the popup disappears beyond the edge of the window), it's a definite sign that the popup is fake."
Click to expand...

mirimir · Feb 16, 2019

Generally, when you click "log in with Facebook" button available on any website ...
Click to expand...

Well, that's the key fail, right there!

Rasheed187 · Feb 16, 2019

mirimir said: ↑

Well, that's the key fail, right there!
Click to expand...

It's indeed too risky. That's why I use a fake FB account for this stuff, but even then it's risky.

guest · Mar 12, 2019

New 'Creative' Phishing Attack You Really Should Pay Attention To
March 11, 2019
https://thehackernews.com/2019/03/ios-mobile-phishing-attack.html

A cybersecurity researcher who last month warned of a creative phishing campaign has now shared details of a new but similar attack campaign with The Hacker News that has specifically been designed to target mobile users.
New Phishing Attack Mimics Mobile Browser Animation and Design
As you can see in the video, a malicious website that looks like Airbnb prompts users to authenticate using Facebook login, but upon clicking, the page displays a fake tab switching animation video aimed to trick users into thinking that their browsers are behaving normally.

If users are not very attentive to details and fail to spot minor differences, they would eventually end up filling the username and password fields on the phishing page, resulting in giving away their social media credentials to the attackers.
Click to expand...

Log in or Sign up

New Phishing Attack That Even Most Vigilant Users Could Fall For

guest Guest

mirimir Registered Member

Rasheed187 Registered Member

guest Guest

Log in or Sign up

New Phishing Attack That Even Most Vigilant Users Could Fall For

guest Guest

mirimir Registered Member

Rasheed187 Registered Member

guest Guest

Useful Searches