< Back to all clusters
[TECHNOLOGY] · Argentina, Mexico, Chile, Dominican Republic · 15 sources

started · updated

Cybersecurity threats evolve with BitB phishing and mobile app exploits

Cybercriminals are employing increasingly sophisticated methods to bypass traditional security measures like biometrics and two-factor authentication. One prominent technique is the ‘BitB’ or ‘browser in the browser’ attack. This advanced phishing method creates a fake browser window within a legitimate one, mimicking login pop-ups for services like Google or social media. Because the fake window includes a visual imitation of a legitimate address bar, users often fail to realize the URL is merely an image, allowing attackers to steal credentials and financial data.

In addition to BitB, experts warn of a growing threat where attackers inject malicious code directly into mobile banking applications. By exploiting development and debugging tools, criminals can manipulate internal software to alter transfers or clone interfaces without requiring the user to click suspicious links. This bypasses standard protections like facial recognition.

Recent studies highlight a significant gap in digital literacy; while a high percentage of users report receiving suspicious links via SMS or email, very few feel equipped to protect their personal data. Furthermore, new legal frameworks, such as the upcoming penal code in the Dominican Republic, are beginning to address the corporate responsibility and compliance required to prevent companies from being used as instruments for electronic fraud.

Entities

Cadem · Google · Google Chrome · Microsoft Edge · Mozilla Firefox · Nubatech · Safari · WOM

Claims

What the coverage asserts, and how many sources carry each claim.

Sources