4 ms·
They could put whatever is most effective at the destination of that URL. Once you're visiting a URL crafted by the attacker, you're already in deep trouble.
by diminoten 10y ago
They could put whatever is most effective at the destination of that URL. Once you're visiting a URL crafted by the attacker, you're already in deep trouble. Often that's all it takes, merely visiting the URL.
- Dylan16807 10y agoIf you assume people have the attention span of gnats, I guess. If I'm clicking a link to unsubscribe you're not going to get me to start entering personal information.
- thraway2016 10y agoCrafted-content UAF vulns are still occasionally being found in browsers. To say nothing of unpatched/non-updated browsers.
- Dylan16807 10y agoYou don't need a trick URL for those.
- thraway2016 10y agoThe point is that simply clicking a dodgy link can, in some cases, own you. No credential acquisition required.
- Dylan16807 10y agoYes but what does that have to do with the article?
- diminoten 10y agoAre you asking what a dodgy URL has to do with the article?
- Dylan16807 10y agoIf they get you to click on a link, it doesn't matter what it looks like in the address bar. So what does a malicious link that could be on any domain have to do with domain spoofing?
- diminoten 10y agoIf you hover over a link in a browser, the URL of the link will be shown as a tooltip, or in the bottom of your browser window.