Phishing kudzera pa msakatuli wofananira pawindo la pop-up

Chidziwitso chasindikizidwa chokhudza njira yachinyengo yomwe imalola wogwiritsa ntchito kupanga chinyengo chogwira ntchito ndi mawonekedwe ovomerezeka ovomerezeka mwa kukonzanso mawonekedwe a osatsegula m'dera lomwe likuwonetsedwa pamwamba pawindo lamakono pogwiritsa ntchito iframe. Ngati owukira akale anayesa kunyenga wogwiritsa ntchito polembetsa madambwe omwe ali ndi masipelo ofanana kapena kuwongolera magawo mu ulalo, ndiye pogwiritsa ntchito njira yomwe akufuna kugwiritsa ntchito HTML ndi CSS, zinthu zimakokedwa pamwamba pa zenera la pop-up zomwe zimafanana ndi msakatuli, kuphatikiza. mutu wokhala ndi mabatani owongolera zenera ndi bar adilesi , yomwe imaphatikizapo adilesi yomwe si adilesi yeniyeni ya zomwe zili.

Phishing kudzera pa msakatuli wofananira pawindo la pop-up

Poganizira kuti mawebusayiti ambiri amagwiritsa ntchito mafomu otsimikizira kudzera muzinthu zina zomwe zimathandizira protocol ya OAuth, ndipo mafomuwa amawonetsedwa pawindo lapadera, kupanga mawonekedwe owoneka bwino a msakatuli amatha kusokeretsa ngakhale wogwiritsa ntchito wodziwa komanso watcheru. Njira yomwe ikufunidwa, mwachitsanzo, ingagwiritsidwe ntchito pamasamba obedwa kapena osayenera kuti asonkhanitse zinsinsi za ogwiritsa ntchito.

Wofufuza yemwe adafotokoza za vutoli adasindikiza masinthidwe okonzeka otengera mawonekedwe a Chrome mumitu yakuda ndi yopepuka ya macOS ndi Windows. Zenera la pop-up limapangidwa pogwiritsa ntchito iframe yowonetsedwa pamwamba pazomwe zili. Kuti muwonjezere zenizeni, JavaScript imagwiritsidwa ntchito kumangiriza zowongolera zomwe zimakulolani kusuntha zenera la dummy ndikudina mabatani owongolera zenera.

Phishing kudzera pa msakatuli wofananira pawindo la pop-up


Source: opennet.ru

Kuwonjezera ndemanga