Posted on 04/18/2017 12:13:20 PM PDT by Tolerance Sucks Rocks
This is a Wordfence public service security announcement for all users of Chrome and Firefox web browsers:
There is a phishing attack that is receiving much attention today in the security community.
As a reminder: A phishing attack is when an attacker sends you an email that contains a link to a malicious website. You click on the link because it appears to be trusted. Merely visiting the website may infect your computer or you may be tricked into signing into the malicious site with credentials from a site you trust. The attacker then has access to your username, password and any other sensitive information they can trick you into providing.
This variant of a phishing attack uses unicode to register domains that look identical to real domains. These fake domains can be used in phishing attacks to fool users into signing into a fake website, thereby handing over their login credentials to an attacker.
This affects the current version of Chrome browser, which is version 57.0.2987 and the current version of Firefox, which is version 52.0.2. This does not affect Internet Explorer or Safari browsers.
We created our own example to demonstrate how an attacker can register their own domain that looks identical to another company’s domain in the browser. We decided to imitate a healthcare site called ‘epic.com’ by registering our own fake site. You can visit our demo site here in Chrome or Firefox. For comparison you can click here to visit the real epic.com.
Here is what the real epic.com looks like in Chrome:
(Excerpt) Read more at wordfence.com ...
No, it’s not my blog.
You can implement the Firefox fix on the Pale Moon browser also. I’ve already done it on both Firefox and Pale Moon.
Combined General and Maryland “Freak State” PING! with a DANG! thrown in as well.
So how does one go about doing the Firefox fix?
I use Firefox. Please tell a techno-clueless old lady how to fix Firefox for this issue. Thanks.
Good. I hate to see folks descend into that blog depravity.
the instructions are laid out in the original article.
See the original article. The instructions are there, and they are fairly easy to follow.
Often, when I go to Lucienne Goldberg’s website, a new window pops up saying critical Chrome update needed. Obviously a scam, but I haven’t figured out how to stop it.
Its really easy. The linked Wordpress article tells you in detail what the problem is & the steps to fix it, 60 second fix.
I have an Samsung “S7 Edge” running Android v7 (Nutmeg).
When I go to “Gateway Pundit”, there are multiple pop up tabs warning of malware and all kinds of crap. It takes forever for the site to load...if it ever does.
No problem on my laptop running Chrome/Win10
You could always try an Adblock add-on.
I would hope that the only people who are foolish enough to click a link work for the DNC, but that said, this is something that needs to be addressed immediately.
Thanks for posting. Useful tip!
Thanks. FF just issued an update which I downloaded right away.
Thank you. I admit that I was afraid to click on the link.
OK. Thanks, FRiend.
Make sure that update actually fixed the problem.
Tried it on my Linux computer, doesn’t apply. no network.idn Preference Name.
I know I sound really dumb when I ask this:
When I go to the Firefox location bar I get FR (my home page). Is this the Firefox location bar? If not, where is it? I don’t know where to type about:config, etc.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.