Serious bug opens major browsers to phishing attack
January 14, 2009 by Shanmuga
Filed under Browser Security, Recommended Reads, Vulnerabilities
"Here’s how an attack would work: The bad guys would hack a legitimate website and plant HTML code that looks like a pop-up security alert window. The pop-up would then ask the victim to enter password and login information, and possibly answer other security questions used by the banks to verify the identity of their customers.
For attackers, the hard part would be convincing victims that this pop-up notice is legitimate. But thanks to a bug found in the JavaScript engines of all the most widely-used browsers, there is a way to make this type of attack seem more believable, said Amit Klein, Trusteer’s chief technology officer." – Content courtesy of Techworld.com – Major bug opens all browsers to phishing attack



















Comments
Everyone has an Opinion...why don't you share yours and oh, if you want a pic to show with your comment, go get a gravatar! or you can even subscribe to our comments feed.