Phishing Kit Lets Attackers Create Fake Chrome Browser Windows

Share post:

A new phishing kit called Evilginx can allow attackers to create a replica of login forms using a fake Chrome browser.

The attack creates fake browser windows within real browser Windows (Browser in the Browser) in a bid to make it more convincing.

The Browser in the Browser attack uses templates that imitate Chrome browser Windows. The templates were created by security researcher mr. d0x include those for Google Chrome, Windows, and Macs. The templates also offer dark and light mode variants.

Previously, threat actors can only create fake SSO windows using HTML, CSS, and JavaScript. Now, even wannabe cybercriminals can use the template to create a Chrome window to display single sign-on login forms for any online platform.

They can do that by downloading the templates and editing them to contain the desired URL and Window title. After that, they can use an iframe to display the login form.

It is also possible to add the HTML for the login form directly into the template. However, to do this, they will need to align the form properly using CSS and HTML.

For more information, read the original story in BleepingComputer.


Related articles

Cyber Security Today, May 20, 2024 -Ransomware gang claims it hit a Canadian internet provider

A ransomware gang claims it hit a Canadian internet provider. Welcome to Cyber Security Today. It's Monday May 20th,...

Cyber Security Today, Week in Review for week ending Friday May 17, 2024

Welcome to Cyber Security Today. This is the Week in Review for the week ending Friday, May 17th,...

Cyber Security Today, May 17, 2024 – Malware hiding in Apache Tomcat servers

Malware hiding in Apache Tomcat servers, new backdoors found, and more Welcome to Cyber Security Today. It's Friday, May...

MIT students exploit blockchain vulnerability to steal 25 million dollars

Two MIT students have been implicated in a highly sophisticated cryptocurrency heist, where they reportedly exploited a vulnerability...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways