“Browser in the Browser” Attacks: A Devastating New Phishing Technique!

A new type of cyber attack known as a “browser-in-browser” attack is the new way your PC can be attacked by cybercriminals. Modern website creation technologies have improved to the point where they can show virtually anything on the page: from fields of any color or shape to animation that mimics the moving components of the interface. This implies a phisher can utilize them to create a full-fledged page from another service within their website.

How Does The Browser In-Browser Attack Work?

This is how this attack works. The malicious actors register a website by creating a clone of a legitimate website, which is a common phishing strategy. Alternatively, they might utilize an enticing URL and content to entice victims, such as shopping discounts, career changes, or breaking news that a user might want to remark on. Visitors must sign in to buy something, leave a comment, or access other services that interest them, according to the criminals. The perpetrators then add buttons that ostensibly allow login in through the legitimate services from which they seek to gather passwords.

If victims click on such a button, they’ll see a familiar login window, such as one from Microsoft, Google, or Apple, with the correct address, logo, and input fields — in other words, everything they’re used to seeing. When users hover their mouse over the “Login” button and the “Forgot password” link, the window can even display the right addresses.

How Can You Know If The Login Window Is Real Or Not?

Even though there is nothing about the fraudulent login box that screams “fake,” there are techniques to spot it. Real login windows look and behave like browser windows. You may drag them about the screen and maximize and reduce them. Fake pop-ups are tied to the page on which they appear. Try the following to see if the login form on your screen is genuine:

• • Minimize the browser window where the form appeared. If the login form that should be in a separate window also vanishes, it’s a hoax. An actual window should remain on the screen at all times.
  • Attempt to drag the login window past the parent window’s border. A genuine window will simply cross over; however, a phony window will become trapped.
  • If the login form window behaves strangely — for example if it minimizes with the other window, pauses under the address bar, or disappears behind it — it is a fake, and you should not enter your credentials.

• • For all of your accounts, make sure you utilize a password manager. It verifies the page’s true address and will never enter your credentials into the fields of an unknown site, no matter how trustworthy it appears to be.

• Install a real-time antivirus that includes a phishing protection module. This solution also checks the URL for you and notifies you if a page is unsafe.
• Remember to utilize two-factor authentication as well. Enable it everywhere you have the opportunity, including on all social media platforms.
• Using a VPN is the simplest way to encrypt your connection and hide some of your online activities from threat actors. When you use a VPN, your communication is routed through an encrypted tunnel, and your IP address is replaced with one shared by many VPN users. This way, you can better protect your location, browsing history, and critical information.

Your Thoughts On “Browser In The Browser” Attacks: A Devastating New Phishing Technique!

With the increased cyber-attacks across the globe, it becomes difficult to surf the internet without a certain risk. However, there will be no end to these malicious activities and the best way is to install a real-time antivirus like Systweak Antivirus and use Systweak VPN at the same time on your PC. This will help protect your computer from malware and mask your online activities from all cybercriminals.

Follow us on social media – Facebook, Instagram, and YouTube. For any queries or suggestions, please let us know in the comments section below. We would love to get back to you with a solution. We regularly post tips and tricks, along with answers to common issues related to technology.