New phishing ploy exploits secure sessions to hijack data

By Dan Kaplan on Jan 14, 2009 10:49AM

Researchers have discovered a new way for attackers to phish for credentials without the need to send emails or trick users into visiting a malicious website.

Researchers have discovered a new way for attackers to phish for credentials without the need to send emails or trick users into visiting a malicious website.Dubbed "in-session" phishing by web security firm Trusteer, the conceptualised attack leverages a vulnerability present in all major ...

Hi! You've reached one of our premium articles. This is available exclusively to subscribers.

It's free to register, and only takes a few minutes.

Once you sign up you'll have unlimited access to the full catalogue of Australia's best business IT content, as well as a daily news bulletin delivered straight to your inbox.

Already have an account? Log in to read this article.

Got a news tip for our journalists? Share it with us anonymously here.

Tags: