Topic

Browser-in-the-browser attacks

A phishing technique in which a web page draws a fake browser popup, complete with address bar and padlock, inside the tab the visitor is already viewing.

Current clusters

security2 publishers

Fake Claude Max giveaway harvests Google logins through a window it draws itself

Malwarebytes found a page promising 10,000 free months of Claude Max that skips the card and collects Google logins through a fake browser window loaded from a rented, actively maintained widget.

Publishers:helpnetsecurity.commalwarebytes.com

Reality

Evidence58
Adoption40
Hype gap+12
Incentives62
Confidence66