New malware vocabularly – ‘Tab Napping’

Yes, there is a new form of threat out in the wild. Tab Napping! Sounds sinister…and it is.

Basically, there is a new class of malware that targets users that use multiple tabs. It monitors your browser tabs for activity and will hijack whichever one that you are not using. The hijack will try to replace the real site with a fake version. Usually, this happes with bank websites and the average user just suspects that the bank automatically logged them out for inactivity.

There are some steps you can take to protect yourself:

  • Aalways check the URL in the browser address page is correct before you enter any login details. A fake tabbed page will have a different URL to the website you think you’re using.
  • Always check the URL is using a secure https:// address even if you don’t have tabs open on the browser.
  • If the URL looks suspicious in any way, close the tab and reopen it by entering the correct URL again.
  • Avoid leaving tabs open which require you to type in secure login details. Don’t open any tabs while doing online banking – open new windows instead (CTL + N).
  • Reference Link here.

    Leave a Reply