An Innovative Phishing Style
tehaurum.wordpress.com
An Innovative Phishing Style
1–10 of 83 posts
Re: An Innovative Phishing Style
#2Tangentially related (and an absolutely shameless self-promote): a colleague and I recently described a repeatable approach and methodology (including example) for malware deobfuscation in a recent conference talk. Full narrated video of the talk is here [1], deobfuscation portion is roughly the middle third.
Re: An Innovative Phishing Style
#3The fake pop-up window isn't new. This does seem a fairly well engineered version of the trick, but sites have been pulling this shit since the 90s. It has been a while since I've seen it though, but then I use an ad blocker so I suppose I wouldn't.
Re: An Innovative Phishing Style
#4The fake pop-up window isn't new. This does seem a fairly well engineered version of the trick, but sites have been pulling this shit since the 90s. It has been a while since I've seen it though, but then I use an ad blocker so I suppose I wouldn't.
I distinctly remember laughing at fake popups using Windows UI styling while I’m using Linux.
Re: An Innovative Phishing Style
#5The fake pop-up window isn't new. This does seem a fairly well engineered version of the trick, but sites have been pulling this shit since the 90s. It has been a while since I've seen it though, but then I use an ad blocker so I suppose I wouldn't.
I think the new thing is that they implemented chrome dev tools in the popup window in a convincing enough manner. This sounds far more extreme then any previous example I have heard of on the web.
Re: An Innovative Phishing Style
#6Browsers should implement some mechanisms to combat this type of phishing. I've gone ahead and reported this as a phishing site on Google safe browsing and other services.
Re: An Innovative Phishing Style
#7Browsers should implement some mechanisms to combat this type of phishing. I've gone ahead and reported this as a phishing site on Google safe browsing and other services.
You can just disable grouping taskbar items, which is convenient for me regardless of this issue. Then it's clear that 1 window is not 2 windows.
Re: An Innovative Phishing Style
#8The fake pop-up window isn't new. This does seem a fairly well engineered version of the trick, but sites have been pulling this shit since the 90s. It has been a while since I've seen it though, but then I use an ad blocker so I suppose I wouldn't.
I distinctly remember laughing at fake popups using Windows UI styling while I’m using Linux.
Yeah, and this one isn't any better in that regard. Was just examining it on a Mac, where it uses the same Windows UI style.
One should think that malware authors would have already implemented some JS library of sorts for their fake popups that fakes Windows, MacOS and Linux UI styles more convincingly.
Especially since they've applied serious thoughts to other parts of the fake, like the language chooser in the fake Steam popup. It causes a spinner for a short while and then an error popup saying something like "cannot communicate with Steam server". Nice idea to dead-end page components that they didn't want to fake more convincingly.
Re: An Innovative Phishing Style
#9Earlier quoted context omitted.
I distinctly remember laughing at fake popups using Windows UI styling while I’m using Linux.
Yeah, and this one isn't any better in that regard. Was just examining it on a Mac, where it uses the same Windows UI style. One should think that malware authors would have already implemented some JS library of sorts for their fake popups that fakes Windows, MacOS and Linux UI styles more convincingly. Especially since they've applied serious thoughts to other parts of the fake, like the language chooser in the fak…
Unthemed Windows & Mac OS will be convincing to a lot, Linux will be pretty hard. Then again those who tinker with their computers are unlikely to fall into this trap.
Re: An Innovative Phishing Style
#10This is hard to defend against, but changing the default colour scheme (also used for every window title bar) helps somewhat.