3 ms·
From what little I could glean, it sounded like the attackers used some kind of CSRF attack that required the target account to log in. IDG probably logged in
by Xichekolas 17y ago
From what little I could glean, it sounded like the attackers used some kind of CSRF attack that required the target account to log in.
IDG probably logged in with NoScript enabled, preventing the attacker's script from being run by IDG's browser. Disabling NoScript allowed the CSRF attack to work properly. The website was merely an unwitting pawn.