Phishing campaign uses UPS.com XSS vulnerability to distribute malware

Phishing campaign uses UPS.com XSS vuln to distribute malware
August 23, 2021
https://www.bleepingcomputer.com/ne...n-uses-upscom-xss-vuln-to-distribute-malware/

 

With Micro there's one thing you can always count on. Wonders never cease. Novel intrusions either.

 

This just proves that XSS vulnerabilities should still be considered as a serious threat.

 

To be honest, I didn't fully understand the attack, perhaps I should read it again. But wouldn't an adblocker like uBlock protect against this? And I thought browsers were already hardened against these type of attacks.

 

Absolutely yes, unless the end user allows the script.

 

Netcraft is one extension worth having for any sensitive web browsing like banking, etc., especially if you don't use Edge. And it's a trusted vendor.

 

I'm not typically a fan of extensions that utilize community feedback for even part of their functionality, but this one does look decent. Thanks.

 

I have been using the Netcraft extension for years for chrome on W10 and have it on my Android phone.

 

Netcraft looks useful, I believe they're based in Bath (The 'Georgian' City). Nice place. I once took a bath in Bath. Honestly.

 

I believe this is what I often get to see on adult sites, after clicking on certain links they try to redirect you to some other site that you didn't want to visit, I suppose this is about the same.

I totally forgot about these guys, the Netcraft extension does indeed seem to be quite useful, thanks.