News for hackers. Stuff that matters.

A comment on Google Docs Users Targeted by Phishing Scam. Parent comment

Re:Google Docs Users Targeted by Phishing Scam by ianhawes on Friday March 14, 2014 @03:51PM (#7401331)
I think the parent is theorizing that they could emulate someone logging in through their own headless browser to see if the credentials are valid, then if they are and the account has 2FA, they could trigger the SMS.
[ Parent | on HN ]
Re:Google Docs Users Targeted by Phishing Scam by zaroth on Friday March 14, 2014 @04:25PM (#7401586)
Exactly!

I'd assume there's CSRF on the login page, hence why I said: "hope ... Google notices the source IP or user-agent of the attacker"

[ Parent | on HN ]