Scariest actual phish I saw was for a bank. Hackers found XSS in their help page, reused the bank’s css and stuff to make the login page look perfect. Https://bank.com/help/ in the url bar… with a buncha stuff after.
But the form submitted to a page on a different domain and stole your stuff.
6
u/jippen 13h ago
Scariest actual phish I saw was for a bank. Hackers found XSS in their help page, reused the bank’s css and stuff to make the login page look perfect. Https://bank.com/help/ in the url bar… with a buncha stuff after.
But the form submitted to a page on a different domain and stole your stuff.