PDA

View Full Version : Tabnabbing new method for phishing


davidh
May 25th, 2010, 10:58 PM
Tabnabbing new method for phishing.
Share |
Published: 2010-05-25,
Last Updated: 2010-05-25 19:33:46 UTC
by donald smith (Version: 1)
5 comment(s)

New method for phishing discovered by Aza Raskin “creative” lead for firefox.
http://isc.sans.org/diary.html?storyid=8854&rss

I won't bother to try to describe the attack in my own words. The article is not a hard read, for those who want to look at it.

FWIW, NoScript could easily block this attack.

I did not bother to check to see if there is any setting in FF that would disable or at least warn of the attack. Perhaps there is a FF workaround fix somewhere "under the hood". It's not really a bug, but perhaps more of a UI design problem?