Browser-in-the-Browser (BitB) Attack Takes Advantage of Single-Sign-On Trust

					<div>
				<div>
		<div>
							<div>
			<div>
						<p>Found in environments protected by: Microsoft EOP&nbsp;</p><p>By Elmer Hernandez, Cofense Phishing Defense Center&nbsp;</p><p>The Phishing Defence Center (PDC) has observed malicious html attachments intended to carry out Browser-in-the-Browser (BitB) attacks.</p><h2>What are BitB Attacks?</h2><p>BitB attacks can deceive users by displaying what appears to be a legitimate separate pop-up login window. This window contains a spoofed URL bar with an identical-looking domain name from a trusted authentication provider. BitB attacks can be effective because they abuse modern Single-Sign-On …