3 ms·
Those are script kiddie level phishing attacks. They use free domains and free link shorteners. Only a user that doesn't look at the address bar could buy that.
by codedokode 10y ago
Those are script kiddie level phishing attacks. They use free domains and free link shorteners. Only a user that doesn't look at the address bar could buy that.
Is shows how insecure web is: a typical user cannot distinct between real and a fake login page. That is why we should stop using outdated insecure password system and switch to cryptographic USB tokens.
But Google usually blocks access to the account when you try to login from a new IP address. Why didn't it work here?
- rdslw 10y agoWrong. Look at the https://google.com/amp/hackme.com https://google.com/amp/hackme.com and pictures from article. TL;DR: google amp does redirect, and you can use bit.ly/xxx instead hackme.com in example above.
- bduerst 10y agoThe website url is still http://www.hackme.com http://www.hackme.com though. These different iterations of myaccount-google.com, support.goog1e.com, etc. are common for many companies - the best thing to do is use 2-step auth.
- codedokode 10y agoThe fake login page still is not on a google domain.