This is a warning for all Gmail and Gchat fiends. There is a new phishing scam making it’s rounds, and its deceptively evil.

Many of us are hit with phishing emails and links often enough that we know better than to submit our login and password to just any old site claiming to be “Google”, “HSBC”, “Citibank”, etc. – but this attack is different. Instead of immediately portraying itself as one of these sites, it waits until you least expect it before it strikes.

It works like this:

1. You open a web page. It doesn’t immediately appear threatening. You decide to check on your other tabs because it’s taking too long to load, or perhaps someone messaged you on facebook chat.
2. After a period of time spent on tabs other than the one in question, the browser tab info changes. It doesn’t just change into anything - it changes into an near exact replicate of a Gmail (or similar) tab, icon and everything.
3. You click back to the tab thinking Gchat must have logged you out for inactivity.
4. You provide the credentials to log back in, and before you know it, you’ve been phished. Bummer.
5. The site redirects you to your Gmail as if you just logged back in, when in fact you were never logged out to begin with.

Didn’t quite follow that? The video below shows you the attack in action:

[Source: www.azarask.in]

Related Posts

1. 
   
   Video: Microsoft Employees Make Hilarious “Gmail Man” Ads
2. 
   
   Must Watch: Signs
3. 
   
   Brazilian Woman Wins Right To Watch Porn At Work

---