Some of the most creative people in the world are hackers and thieves. They are often one step ahead, using their brains in a creative way to find new tools and methods that will help them steal information and money from other people.
Today I learned about something called a Browser in the Browser attack in which a website will require you to register an account in order to watch the content or buy a product. The only thing is that you have to register your account using a social media profile like Google, Twitter, or Facebook. We have all done this several times and we are used to seeing a pop-up come in which you need to give your social media account permission to the used on the website you are visiting.
The same is happening during a BitB hack, except for the fact that you never visit the actual website of Google or Facebook to give the permission. Instead the hackers create a browser window in your present window that will look 100% like the login pages from Google and Facebook. But, this is just a fake version and any information added by you will be sent directly to the hackers.
They can later use this information to hack your profiles, get hold of even more passwords, and do lots of harm. That is why it is vital to use different passwords everywhere and also to use a password manager as this would immediately notice that you are not visiting the actual websites of Facebook and Google. As a result, it wouldn't suggest any passwords, which again should make you suspicious and stop the process.
You can learn more about the Browser in the Browser attacks by clicking the link earlier in the article.