News for hackers. Stuff that matters.

A comment on The ‘Zelle fraud’ scam: how it works, how to fight back. Parent comment

Re:The ‘Zelle fraud’ scam: how it works, how to fight back by weaksauce on Friday November 19, 2021 @11:11PM (#29285483)
has there been a breach of credentials associated with clicking on a link and having firefox or chrome fill in your password saved from the site? i am pretty paranoid but if firefox says it's able to fill in a saved cred from this site i assume it's probably the right site. now i am paranoid enough that i don't do this for sites with a lot of downside like banking or the like... those are a strict "i'm calling the number on the back of the card or lookup the number from their website" kinda things.
[ Parent | on HN ]
Re:The ‘Zelle fraud’ scam: how it works, how to fight back by frosted-flakes on Saturday November 20, 2021 @01:19AM (#29286006)
Firefox/Chrome will link the saved credential to the domain name, so unless your bank lost control of its domain name, that's an unlikely attack vector. To be safe you can confirm that you're on the right site by manually looking up the domain name.
[ Parent | on HN ]
Re:The ‘Zelle fraud’ scam: how it works, how to fight back by weaksauce on Saturday November 20, 2021 @01:48PM (#29290735)
Yeah that I get but I am curious if there is a more subtle hack or technique that would bypass that somehow. like a MitM attack or something more clever.
[ Parent | on HN ]