"Tabnapping" is a new phishing technique. All you need to know in one sentence: If you go to a browser tab and it looks like Google or some other site has signed you out after inactivity, DON'T SIGN BACK IN ON THAT PAGE, but close that tab and open a FRESH one to sign in.
Details for the technically inclined are at http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/ along with a proof-of-concept implementation.
This is real, it's clever, and while I haven't heard of it being used for real yet, it was announced yesterday so by now I'm sure it's out there. Spread the word.
Details for the technically inclined are at http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/ along with a proof-of-concept implementation.
This is real, it's clever, and while I haven't heard of it being used for real yet, it was announced yesterday so by now I'm sure it's out there. Spread the word.