Wednesday, September 10, 2014

Tabnapping:New phishing using Javascript and Google's fame

" When they click back to the fake Gmail tab, they’ll see the standard Gmail login page, assume they’ve been logged out, and provide their credentials to log in. The attack preys on the perceived immutability of tabs."