3 ms·
How is this CSRF? This is just phishing, CSRF is something completely different.
by samarudge 15y ago
How is this CSRF? This is just phishing, CSRF is something completely different.
- MattBearman 15y agoMy thoughts exactly, there's no cross site requests happening, its all taking place on the phishing server (liviejournal.com)
- adammacleod 15y ago"The attack will appear as though someone has left you a comment, but an image similar to the following will appear requesting your password:" Without knowing anything about the attack my guess is that the author is probably confused with XSS.