Because every submission should have a pessimistic, cynical reply: I expect this...

Mtinie · on March 18, 2014

Christian Cantrell, from Adobe, demonstrated a similar phishing attack vector: https://www.youtube.com/watch?v=XQXFO9NNO8g

"This won't end well..."

stingraycharles · on March 18, 2014

How would that work, a full-screen emulation of safari in js?

dictum · on March 18, 2014

It would be trivial to imitate Mobile Safari's chrome with "actuallegitdomain.com" in the address bar instead of "actuallegitdomain.com.ooo.ag" or resorting to IDN tricks (since most browsers, and I think Mobile Safari too, show the xn--wh4t3v3r.com version).

selectodude · on March 18, 2014

I would think a full-screen emulation of a bank app or something. Phishing email sends you to a link that "opens" your bank app and asks you to sign in.