James Fisher jameshfisher.com

The inception bar: a new phishing method  ↦

Welcome to HSBC, the world’s seventh-largest bank! Of course, the page you’re reading isn’t actually hosted on hsbc.com; it’s hosted on jameshfisher.com. But when you visit this page on Chrome for mobile and scroll a little way, the page is able to display itself as hsbc.com - and worse, the page is able to jail you in this fake browser!

Scary stuff since there is no known protection against this attack. It seems to be up to the Chrome team to figure out a solution.

The inception bar: a new phishing method

Discussion

Sign in or Join to comment or subscribe

0:00 / 0:00