/explore
|
You are here 
|
blog.andlabs.org | ||
| | | | |
textslashplain.com
One attack technique I've seen in use recently involves enticing the victim to enter their password into a locally-downloaded HTML file. The attack begins by the victim receiving an email lure with a HTML file attachment (for me, often with the .shtml file extension): When the user opens the file, a HTML-based credential prompt is... |
|
| | | | | ||
| | | | |
www.skeletonscribe.net
This combines RSnake's Popup & Focus URL Hijacking * with Paul Stone's login detection to enhance phishing attacks. The basic concept ... |
|
| | | | | ||
| | | | |
pberba.github.io
How to deploy a phishing attack on LastPass users, even when they are protected with Yubikey physical keys, and why U2F helps us prevent phishing |
|
| | | | | ||
| | | | |
risley.net
[AI summary] The author provides a critical analysis of password manager security, specifically comparing the bloated, enterprise-focused 1Password with the privacy-centric, open-source Standard Notes, while offering technical advice on encryption, biometric risks, and trusted platform modules. |
|
| | | |||
