started · updated
Cybersecurity threats evolve with BitB phishing and mobile app exploits
Cybercriminals are employing increasingly sophisticated methods to bypass traditional security measures like biometrics and two-factor authentication. One prominent technique is the ‘BitB’ or ‘browser in the browser’ attack. This advanced phishing method creates a fake browser window within a legitimate one, mimicking login pop-ups for services like Google or social media. Because the fake window includes a visual imitation of a legitimate address bar, users often fail to realize the URL is merely an image, allowing attackers to steal credentials and financial data.
In addition to BitB, experts warn of a growing threat where attackers inject malicious code directly into mobile banking applications. By exploiting development and debugging tools, criminals can manipulate internal software to alter transfers or clone interfaces without requiring the user to click suspicious links. This bypasses standard protections like facial recognition.
Recent studies highlight a significant gap in digital literacy; while a high percentage of users report receiving suspicious links via SMS or email, very few feel equipped to protect their personal data. Furthermore, new legal frameworks, such as the upcoming penal code in the Dominican Republic, are beginning to address the corporate responsibility and compliance required to prevent companies from being used as instruments for electronic fraud.
Entities
Cadem · Google · Google Chrome · Microsoft Edge · Mozilla Firefox · Nubatech · Safari · WOM
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] The BitB attack modality originated in 2022. radiotvsierras.com · tolhuinprimero.com · tn.com.ar
- [● 2 SOURCES] Cybercriminals may use artificial intelligence tools to design malicious websites. radiotvsierras.com · tn.com.ar
- [● 2 SOURCES] The technique is used to steal credentials for social media, email, and financial services. radiotvsierras.com · tolhuinprimero.com
- [● 3 SOURCES] BitB stands for ‘browser in the browser’. radiotvsierras.com · tolhuinprimero.com · tn.com.ar
- [● 3 SOURCES] BitB is an advanced form of phishing that works on any browser, including Chrome, Safari, Firefox, or Edge. radiotvsierras.com · tolhuinprimero.com · tn.com.ar
- [● 2 SOURCES] Attackers mimic the login pop-up windows and the address bar, displaying a legitimate-looking URL that is actually an image. radiotvsierras.com · tolhuinprimero.com