By now, all but the geriatric Web users know about phishing. Usually it takes the form of a seemingly-official email from a bank or other money-related Web service. of the these attacks are painfully obvious — but what if you removed the email attack vector? What if you removed those daft give-away URLs? What if the phishing attack was pure, seemingly-benign JavaScript that’s invisible to all but the judicious of Web users

fd0c1dff41ishing.jpg 350x231 Tabjacking: a new and ingenious phishing attack

Original post:
Tabjacking: a new and ingenious phishing attack