3 ms·

Fortunately, if you're using a password manager (and you don't have your password memorized), your password manager plugin will probably say "no logins saved fo

Fortunately, if you're using a password manager (and you don't have your password memorized), your password manager plugin will probably say "no logins saved for this site" which will clue you in on the attack.

justin66 12y ago
Hmmm. I use a password manager (Password Safe) and this is something that it won't do. With an attack like this I'd be better off just using the password feature built into the browser.
_pmf_ 12y ago
> which will clue you in on the attack. I would just assume that this is due to browser lag (since at my machine using Chrome, I've usually written my credentials before the browser's delay for notifying me about saved logins pops up.
- morgante 12y ago
  No, most password managers (1Password, for example) will only fill in the passwords if the domain matches. Truth be told, I don't think this hack would work on anyone who is sophisticated enough to use a password manager though. Who enters login info without inspecting the URL?
  - alandarev 12y ago
    Another truth, is that phishing attacks are targeting the masses. If unsophisticated people will be facing difficulties, it is going to be enormously successful attack vector. Despite of the fact, that it completely fails in deceiving IT people.
    - _pmf_ 12y ago
      This is analogous to the Nigerian scams that are engineered on purpose to be very crude in order to single out the most gullible persons.
  - addandsubtract 12y ago
    I use a passowrd manager (KeePass), but don't have it connected to my browser to auto-complete forms. Yet this hack could potentially work on me. I can imagine browsing several tabs at night, opening gmail, fb, my bank, etc. while reading reddit and getting tricked into filling in a phishing form. Granted, I always double check my bank login, but this is still a very valid attack no matter how "sophisticated" you are.
  - hughw 12y ago
    Don't you ever lose focus for a moment? I do. Especially with 35 tabs open.

justin66 12y ago

Hmmm. I use a password manager (Password Safe) and this is something that it won't do. With an attack like this I'd be better off just using the password feature built into the browser.

_pmf_ 12y ago

> which will clue you in on the attack. I would just assume that this is due to browser lag (since at my machine using Chrome, I've usually written my credentials before the browser's delay for notifying me about saved logins pops up.

morgante 12y ago
No, most password managers (1Password, for example) will only fill in the passwords if the domain matches. Truth be told, I don't think this hack would work on anyone who is sophisticated enough to use a password manager though. Who enters login info without inspecting the URL?
- alandarev 12y ago
  Another truth, is that phishing attacks are targeting the masses. If unsophisticated people will be facing difficulties, it is going to be enormously successful attack vector. Despite of the fact, that it completely fails in deceiving IT people.
  - _pmf_ 12y ago
    This is analogous to the Nigerian scams that are engineered on purpose to be very crude in order to single out the most gullible persons.
- addandsubtract 12y ago
  I use a passowrd manager (KeePass), but don't have it connected to my browser to auto-complete forms. Yet this hack could potentially work on me. I can imagine browsing several tabs at night, opening gmail, fb, my bank, etc. while reading reddit and getting tricked into filling in a phishing form. Granted, I always double check my bank login, but this is still a very valid attack no matter how "sophisticated" you are.
- hughw 12y ago
  Don't you ever lose focus for a moment? I do. Especially with 35 tabs open.