Any internet user worth their salt can spot a classic phishing scheme — the fake URL, suspicious link, or unusual email request are all dead giveaways that something fishy is amiss. But a new, much more subtle hacking technique has recently emerged, and even experts admit it’s hard to spot. Enter the BitB phishing scam.
What Is a BitB Phishing Attack?
A browser-in-the-browser (BitB) attack involves a replica of a single sign-on (SSO) authentication window popping up. When you try to create an account on a new site, the faux SSO window opens and prompts you to log in using Facebook, Gmail, or another site that employs OAuth methods.