News for hackers. Stuff that matters.

A comment on The closest I've ever come to falling for a Gmail phishing attack. Parent comment

Re:The closest I've ever come to falling for a Gmail phishin... by fnl on Thursday January 12, 2017 @09:13AM (#13382289)
> They capture the 2FA code

How can that be done? That's between my phone and Google, so how can they "listen in" on that?

[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by putlake on Thursday January 12, 2017 @01:56PM (#13385021)
The phishing site will ask you for your 2FA code and then enter it on the real Google login page.
[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by fnl on Friday January 20, 2017 @06:51AM (#13443143)
Hmm, but that gets us back to "stage one": For that to work, you have to ignore your URL-bar...
[ Parent | on HN ]