// Hacking NEWS // Phishing: Watch Out For This URL in Chrome

in #news5 years ago

A developer has developed a system to display a fake URL in Google's browser for Android. This could allow crooks to make fake sites, even more, realistic.

GoogleAndroid.jpg
Source

A fake address bar in Chrome for Android, convenient for recovering some data by phishing. It is this proof of concept that has just developed the Jim Fisher, a demonstration in support.

A simple image replaces the bar

On the page where he explains his "hack", we find that when we scroll down, the Chrome original URL address disappears and gives way to another, completely false. This shows the URL of the HSBC bank and even simulates a number of open tabs in the browser.

The system is ideal for misleading users if they do not realize the replacement that is made when scrolling the page. A simple image placed at the top of the page that could cause many problems to potential victims.

4675973c3faa06891b9a2f9ce55d1.jpg

A trick to avoid the trap

The only hint for the moment identified by 9To5Google to display the original bar: lock and unlock its smartphone. We tested, and it works, we are left with the two address bars; the real one above, the false one underneath.
If this flaw has not been exploited yet, however, beware when you need to enter personal data on a site and use the tip above to verify that this is the original site.

Is this a serious security flaw? Well, even I, as the creator of the inception bar, found myself accidentally using it! So I can imagine this technique fooling users who are less aware of it, and who are less technically literate. The only time the user has the opportunity to verify the true URL is on page load, before scrolling the page. After that, there’s not much escape.

Sources: Jim Fisher and 9to5Google

Stay Informed, Stay Safe

DQmdpsoEfLe5nRg4Q1oKWHNjLdMnAucCYfRou1yF5Yiwrzs.png

DQmNuF3L71zzxAyJB7Lk37yBqjBRo2uafTAudFDLzsoRV5L.gif

Sort:  


Congratulations @vijbzabyss!
You raised your level and are now a Minnow!

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

Coin Marketplace

STEEM 0.20
TRX 0.13
JST 0.030
BTC 66631.72
ETH 3487.54
USDT 1.00
SBD 2.71