Title: Security researchers poke holes in Google's anti-phishing Chrome extension Post by: HCK on May 04, 2015, 03:00:17 pm Security researchers poke holes in Google's anti-phishing Chrome extension
<article> <section class="page"> <p>For the past several days security researchers have raced to demonstrate that phishing protections added by a new Google Chrome extension can be bypassed with ease.</p><p>The Password Alert (https://chrome.google.com/webstore/detail/password-alert/noondiphcddnnabmjcihcjfbhfklnnep?utm_source=chrome-app-launcher-info-dialog) extension, developed by Google and released Wednesday, is designed to alert Chrome users when they input their Gmail passwords on websites that don’t belong to Google (http://www.pcworld.com/article/2917112/google-develops-new-defense-against-phishing.html) and are therefore part of phishing attacks.</p><p>By Thursday, an information security consultant named Paul Moore had already devised a method (https://www.youtube.com/watch?v=HwEGYwCgqtk) that attackers could use to block the extension’s alerts.</p><p class="jumpTag"><a href="/article/2918172/researchers-play-cat-and-mouse-with-googles-antiphishing-chrome-extension.html#jump">To read this article in full or to leave a comment, please click here[/url]</p></section></article> Source: Security researchers poke holes in Google's anti-phishing Chrome extension (http://www.macworld.com/article/2918172/researchers-play-cat-and-mouse-with-googles-antiphishing-chrome-extension.html#tk.rss_all) |