5 ms·
Is it possible to have a valid certificate for, say, capіtalone.com? The only thing you could rely on is your browser not automatically entering the saved passw
by jotm 5y ago
Is it possible to have a valid certificate for, say, capіtalone.com? The only thing you could rely on is your browser not automatically entering the saved passwords.
Funnily enough, I checked and the domain is available, so I guess such an attack is harder than I thought :D
- tialaramex 5y agoBut what's your path to victory? You now own a phishing domain, why are people going to visit your phishing site and get phished? How does the WiFi help? There's quite a jump from "I used the WiFi in that new coffee shop" to "And also I let them replace all my bookmarks" and unless I missed something big it feels like you might just as well approach such gullible customers and ask for their bank login details to make buying coffee easier.
- jotm 5y agoYeah, that'd probably work better in email phishing. I was thinking, if you have a public AP with a decent number of users, you redirect all of their requests to your phishing domain, get the credentials, ???, profit.