WHAT IS TAB NAPPING ???
Tab napping is new type of phishing scam that does not require you to click on any URL to redirect you to the phishing site instead it relies on the fact that a lot of people used tabbed browsing(Opening multiple tabs while browsing).In tab napping one of your inactive tab is automatically replaced by with a new tab without your knowledge.For example one of your inactive tab in which you have opened your bank’s website will be automatically replaced with the phishing site of your bank and you will be asked to enter your Username and password.You might think you have been signed out or never logged in but when you will enter the details again it will be sent to the hacker.
HOW DOES TAB NAPPING WORKS ???
Tab napping is more sophisticated than the phishing scams we’ve seen so far, and it no longer relies on persuading you to click on a dodgy link. Instead it targets Internet users who open lots of tabs on their browser at the same time.
How does it work? By replacing an inactive browser tab with a fake page set up specifically to obtain your personal data - without you even realising it has happened.
Believe it or not, fraudsters can actually detect when a tab has been left inactive for a while, and spy on your browser history to find out which websites you regularly visit, and therefore which pages to fake.
Step-By-Step Process
Note: - I am providing you all things which you need for tab napping Download Now
Step 1: - First of all open bgattack file in notepad and the search for window.location = '<Urs Fake Page Link Here>'
and in place of <Urs Fake Page Link Here> put your fake URL.
Step 2: - In second step we want to inject our js code in html file.
Step 3: - In step 3 we will put our Bgattack.js Injecting Code in html file.
Note: - Tab napping will not work until we will not open new tab.
This post is Copied (http://www.hackersrock.in/)
0 comments:
Post a Comment