Italian Bank's XSS Opportunity Seized by Fraudsters | NetcraftAn extremely convincing phishing attack is using a cross-site scripting vulnerability on an Italian Bank’s own website to attempt to steal customers’ bank account details. Fraudsters are currently sending phishing mails which use a specially-crafted URL to inject a modified login form onto the bank’s login page. The vulnerable page is served over SSL with a bona fide SSL certificate issued to Banc
{{#tags}}- {{label}}
{{/tags}}