5 ms·
Wow - after 20 years of phishing variants, I've finally seen one that I'd 100% fall for. The rise of pop-up auth dialogs is something I've kinda just taken for
by djrogers 5y ago
Wow - after 20 years of phishing variants, I've finally seen one that I'd 100% fall for. The rise of pop-up auth dialogs is something I've kinda just taken for granted as more and more platform-native apps make use of them - I wouldn't even blink if it happened to me in a browser window (until now).
- ec109685 5y agoPassword manager is best defense given it won’t auto fill in that bogus window.
- can16358p 5y agoIt would need an extremely sophisticated password manager to actually fill that bogus "window".
- ComodoHacker 5y agoOr extremely dumb one.
- killerontheroad 5y agoThe only defense I have against this attack is that pop-ups annoy me and I always copy and paste the URL into my main browser window to login every time just out of spite.
- asddubs 5y agoit's because of the death of third party cookies. so now pop-ups are needed
- bentcorner 5y agoI think the only defense you could possibly have is to drag popups "outside" the main browser window. I run into this problem dealing with remote desktop windows and WU update dialogs (ok, so which machine is requesting a reboot now?). (I should theme my machines slightly differently to solve this problem). The sad thing is that even with a real popup the only defense you have is the URI, and most of the time its incomprehensible tech-speak so realistically speaking normal everyday users don't stand a chance.