Tabbed Browser Phishing -

------ Update -----------------------------------------------------------------------------------------------------------------------
This exploit has been fixed in most browsers now. If you are using an old version of the browsers listed below you may be at risk.
------ Update -----------------------------------------------------------------------------------------------------------------------

So what on earth is Tabbed Browser phishing? Well you have heard of phishing right? The concept of some nasty person tricking people into disclosing their usernames or passwords. This is mostly used in email messages and we covered them in our article Protecting your Money.

Tabbed browsing is a concept common to the following browsers;

• Mozilla
• Mozilla Firefox
• Camino
• Opera
• Konqueror
• Netscape
• Avant Browser
• Maxthon (MyIE2)

Do you have one of these? If so there is a small security vulnerability that users should be aware of.

What it is

Ok so say you visit a site there is a link on that site to another site that you want to visit. Great you say clicking the link. Then while browsing the next website in a new tab a popup message apears saying something like, "Session timeout- Please re-enter your password to continue" Ok with me so far. You now have a popup that looks like it comes from a website you trust. PayPal for instance. So you enter your password and everything is back to normal.

However you just entered your password into a popup box that then sent that information back to the first website in the inactive tab.

As long as you use your common sence you can avoid this happening to you.

Use our test page to see if your browser is vulnerable. If you have one of the browsers listed above click here to test your browser.