Security Chrome, Firefox, Opera Undetectable Phishing Attack Vulnerability

eva2000 · Apr 18, 2017

Chrome, Firefox and Opera web browsers are vulnerable to a phishing attack variation of a homograph attack Chrome, Firefox, and Opera Vulnerable to Undetectable Phishing Attack !

Browsers such as Chrome, Firefox, and Opera are vulnerable to a new variation of an older attack that allows phishers to register and pass fake domains as the websites of legitimate services, such as Apple, Google, eBay, and others.

Discovered by Chinese security researcher Xudong Zheng, this is a variation of a homograph attack, first identified by Israeli researchers Evgeniy Gabrilovich and Alex Gontmakher, and known since 2001.
Click to expand...

Zheng says he contacted Google and Mozilla on January 20. Google has already fixed this issue in Chrome Canary 59, and a permanent fix will land in Chrome Stable 58, set to be launched later this month.

Mozilla is currently still discussing a fix, but in the meantime, users have an option that will disable Punycode support and mitigate this attack.

Step 1: Type about:config in the Firefox address bar and hit enter.
Step 2: Type network.IDN_show_punycode and set this option to “true” (by double-clicking on it).
Click to expand...

Log in / Register

Forums

Join the community today

Security Chrome, Firefox, Opera Undetectable Phishing Attack Vulnerability

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

Security Chrome, Firefox, Opera Undetectable Phishing Attack Vulnerability

eva2000 Administrator Staff Member

.