In this video, Aza Raskin of Mozilla demonstrates a new class of phishing attack in which the attacker is able to use malicious code in one browser tab to completely change the content in another tab on a victim’s browser.
Suggested articles
It’s Not the Trump Sex Tape, It’s a RAT
Criminals are using the end of the Trump presidency to deliver a new remote-access trojan (RAT) variant disguised as a sex video of the outgoing POTUS, researchers report.
Inbox Attacks: The Miserable Year (2020) That Was
Reflecting on 2020’s record-breaking year of spam and inbox threats.
The 5 Most-Wanted Threatpost Stories of 2020
A look back at what was hot with readers — offering a snapshot of the security stories that were most top-of-mind for security professionals and consumers throughout the year.
Anonymous on
I think this scam exists because today I opened two tabs. One for my Yahoo mail and the other was a banking one. When I finished with online banking, I switched over to my Yahoo tab. I couldn't remember if I had logged out or not, but the login page looked different.
Usually there is a padlock picture just above the login area. This time, there was a shield picture which look unfamiliar. The URL also looked much longer and different from usual. Luckily, having been made aware of the scam (just today, in fact), I retyped the URL to the homepage, and proceeded to the login page - which returned back to what I expected. This is a worrying scam, and so easy to fall prey to.