Chrome exploit uses a fake address bar for phishing attacks

Cyberattackers don't need to find obscure technical flaws to launch phishing attacks -- they might just need a screen capture and some clever web coding. Developer James Fisher has found a relatively simple exploit in Chrome for mobile that takes advantage of how the app displays the address bar. When you scroll down from the top of a page, the approach displays a fake address bar that won't disappear until you visit another site. The attacker can even craft the page to prevent you from seeing the real address bar when you scroll up.

Via: 9to5Google

Source: James Fisher

Chrome exploit uses a fake address bar for phishing attacks posted first on https://www.engadget.com