Facebook login thieves now using browser-in-browser trick
The browser-in-the-browser (BitB) technique has been used by hackers more and more in the last six months to deceive users into divulging Facebook account information.
Security researcher Mr. D0x created the BitB phishing technique in 2022. Later, it was used by cybercriminals in attacks against a number of internet platforms, such as Steam and Facebook.
Threat actors hack Facebook accounts to propagate schemes, gather personal information, or perpetrate identity fraud, according to Trellix analysts tracking harmful behavior. The social network continues to be a top target for scammers despite having over three billion active users.
Users that visit attacker-controlled websites are sent a phony browser pop-up with a login form in a BitB attack.
The pop-up can be customized wit...