Comments on: Devious New Phishing Tactic Targets Tabs http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/ In-depth security news and investigation Sat, 04 Feb 2012 04:48:04 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Mitchell Allen http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-24166 Mitchell Allen Thu, 14 Jul 2011 10:00:42 +0000 http://krebsonsecurity.com/?p=3205#comment-24166 Same thing happened to me. Rest assured, though, if it can be figured out, the bad guys will do it. Raskin admitted he was being lazy. Imagine if he devoted a bit more energy to it. Cheers, Mitch Same thing happened to me. Rest assured, though, if it can be figured out, the bad guys will do it.

Raskin admitted he was being lazy. Imagine if he devoted a bit more energy to it.

Cheers,

Mitch

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: Tony Smit http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-22833 Tony Smit Sat, 04 Jun 2011 01:38:47 +0000 http://krebsonsecurity.com/?p=3205#comment-22833 I am running Firefox from an Ubuntu Live CD and the webpage transitioned to the fake Google page - with no warning from Firefox that the webpage had changed, and I had already set that option to warn me before I had begun browsing. Edit > Preferences > Advanced > Warn me when websites try to redirect or reload the page And I know that setting works because it has reported on two of my favorite websites. This tells me all the data for the webpage is already loaded, and one set of data-to-be-displayed is exchanged for another set in the tab. The only option is to close the tab if I ever see a log in page on an old tab or window. I am running Firefox from an Ubuntu Live CD and the webpage transitioned to the fake Google page – with no warning from Firefox that the webpage had changed, and I had already set that option to warn me before I had begun browsing.

Edit > Preferences > Advanced > Warn me when websites try to redirect or reload the page

And I know that setting works because it has reported on two of my favorite websites.

This tells me all the data for the webpage is already loaded, and one set of data-to-be-displayed is exchanged for another set in the tab.

The only option is to close the tab if I ever see a log in page on an old tab or window.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: nemo http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-22397 nemo Mon, 23 May 2011 18:24:46 +0000 http://krebsonsecurity.com/?p=3205#comment-22397 I think you misunderstand. It isn't one tab modifying another tab, it is one tab modifying itself. The non-javascript version is just a delayed redirect. Something like. Load innocent blog w/ fun article. Go somewhere else. Blog redirects itself much later to gmail look-alike page, including favicon. You forget you were reading the blog, assume it was a gmail tab you left open, and don't bother looking at the url line. I think you misunderstand.
It isn’t one tab modifying another tab, it is one tab modifying itself.

The non-javascript version is just a delayed redirect.

Something like.
Load innocent blog w/ fun article. Go somewhere else.
Blog redirects itself much later to gmail look-alike page, including favicon. You forget you were reading the blog, assume it was a gmail tab you left open, and don’t bother looking at the url line.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: Blah Blue http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-21606 Blah Blue Thu, 05 May 2011 22:16:57 +0000 http://krebsonsecurity.com/?p=3205#comment-21606 Doesn't work 100% as well as it does without NoScript seeing as i just tried it and it wouldn't change to the gmail image until the 2nd time i open a new tab to the Proof of Concept link or while i was still looking at the page making it practically useless to fool someone Doesn’t work 100% as well as it does without NoScript seeing as i just tried it and it wouldn’t change to the gmail image until the 2nd time i open a new tab to the Proof of Concept link or while i was still looking at the page making it practically useless to fool someone

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Alf Igel http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-21370 Alf Igel Sat, 30 Apr 2011 20:30:07 +0000 http://krebsonsecurity.com/?p=3205#comment-21370 Who is implementing code into Firefox to enable a page to alter anything on an other tab? And why are they doing this? One main reason for attacks happening is software allowing attacks due to functions that 99.9% of all user would never miss. Same for Word, Excel and all the other software that has functions that pose more danger and threat than any use. Who is implementing code into Firefox to enable a page to alter anything on an other tab? And why are they doing this?
One main reason for attacks happening is software allowing attacks due to functions that 99.9% of all user would never miss. Same for Word, Excel and all the other software that has functions that pose more danger and threat than any use.

Like or Dislike: Thumb up 2 Thumb down 1
]]> By: omar nabi http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-20007 omar nabi Thu, 31 Mar 2011 00:33:45 +0000 http://krebsonsecurity.com/?p=3205#comment-20007 je suis omar un amis sur le face book pirate moi svp donne moi un email spare physhing ou une autre méthode pour pirat cette personne Hidden due to low comment rating. Click here to see.

Poorly-rated. Like or Dislike: Thumb up 0 Thumb down 7
]]> By: ZVRichard http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-18411 ZVRichard Sat, 19 Feb 2011 19:45:30 +0000 http://krebsonsecurity.com/?p=3205#comment-18411 I have a money market account, but can't seem to get enough information on how it all works. Answer: A <a href="http://expertisemoney.ru/index.php?key=i" rel="nofollow"> money market </a> account is basically a savings account with check writing privileges. It typically earns 4%-5% rate of return. It's great to use as a emergency fund, but not great as a investment vehicle. I would recommend good, growth stock mutual funds as an investment. Hidden due to low comment rating. Click here to see.

Poorly-rated. Like or Dislike: Thumb up 0 Thumb down 16
]]> By: Fuzzy http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-17697 Fuzzy Tue, 08 Feb 2011 17:05:18 +0000 http://krebsonsecurity.com/?p=3205#comment-17697 I opt to calling it Tabtaping I opt to calling it Tabtaping

Like or Dislike: Thumb up 0 Thumb down 3
]]> By: Shyloh Jacobs http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-16723 Shyloh Jacobs Wed, 12 Jan 2011 17:35:57 +0000 http://krebsonsecurity.com/?p=3205#comment-16723 Oh the world is getting more devious every day! Thank you for this article I found it helpful. I am currently considering hiring a virtual cfo but I think I will just stick to the person to person relations. I think computers may be taking things a little to far soon we won't even need to leave the house for anything! Oh the world is getting more devious every day! Thank you for this article I found it helpful. I am currently considering hiring a virtual cfo but I think I will just stick to the person to person relations. I think computers may be taking things a little to far soon we won’t even need to leave the house for anything!

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Brandon Bachman http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/comment-page-3/#comment-12470 Brandon Bachman Sat, 13 Nov 2010 16:45:56 +0000 http://krebsonsecurity.com/?p=3205#comment-12470 Why redefine what nabbing even means? My vote goes to tabjacking. Tab hijacking.

Why redefine what nabbing even means?

My vote goes to tabjacking. Tab hijacking.

Well-loved. Like or Dislike: Thumb up 8 Thumb down 2
]]>