Browser-in-the-Browser Attack Makes Phishing Nearly Invisible - Threatpost

Can we trust web browsers to protect us, even if they say “https?” Not with the novel BitB attack, which fakes popup SSO windows to phish away credentials for Google, Facebook and Microsoft, et al.

Can we trust web browsers to protect us, even if they say https? Not with the novel BitB attack, which fakes popup SSO windows to phish away credentials for Google, Facebook and Microsoft, et al. We’… [+6537 chars]

full article...