Tag Info

New answers tagged

3

If this code exists on a website, it would be one of two reasons: The website itself is malicious (or has been compromised by a malicious person). There is an XSS flaw on a website, and an attacker has injected that script. (Or an external resource has been compromised to the same effect.) Disregarding any client machine/network compromises. Other than ...


1

This is not related to jQuery. It has always (well since Netscape 2) been possible to automatically navigate the user to an arbitrary page, with or without providing something that looks like a link to somewhere else beforehand. The link destination UI (pop-in or status bar) is a convenience feature that was never intended as any kind of security measure. ...


1

My brief research on the Home button showed two trends: (a) the user bypassing it with Accessibility options; (b) using certain features to prevent children from hitting it. It appears that it's a SAK in practice whether or not it's designed for it. Note that this applies to apps that haven't compromised iOS security somehow. If they do that, they might ...


0

Theory Maybe - and this is a fat maybe - someone is trying to desensitize you to clicking on opt-out links so that you get trained to click through any link you get for protecting your privacy. What do you do? Nothing. If you didn't request the email, then don't click it. What's the threat of clicking on a link? (and how do you protect yourself) ...


1

You should consider also that an attacker used IMSI catcher as a possible attack vector to get access to the mobile phone data. IMSI catchers are essentially devices which imitate mobile phones towers in order to intercept calls and text messages. These devices can grab information such as the International Mobile Subscriber Identity, as well as phone ...


2

As OTP by SMS grows in popularity, there's a growing trend in malware to steal it. For example, check out this report on NeverQuest. Once it infects your computer and steals all your other credentials, it shows a very professional looking page, apparently from your bank, asking you to download an app. And then of course, it steals your OTPs. (PDF) ...



Top 50 recent answers are included