‘Tabnabbing’, the threat that stalks after an inactive tab in the browser

Having many open eyelashes in the browser involves a risk known as ‘tabbbing’, a modality of ‘phishing’ that aims to deceive the user to steal the access credentials to a digital service. Cybercounts who use ‘tabbbing’ to deceive their victims; They manipulate an open tab in the browser that is inactive to change it for another false that shows a login of popular services such as Gmail, Facebook or a banking entity.

With this, they intend that the user thinks that the session has expired and must introduce the credentials (user and password) again, which gives rise to their robbery, as they warn from the organization of consumers and users (OCU) in a press release. The National Police have also warned through Tiktok about this threat. To avoid falling into the trap of this ‘phishing’, they recommend closing the browser tabs that are not being used and check the authenticity of the ‘URL’ of the pages that request a password.

Additionally, it is convenient to have a safety solution that detects threats and activate multifactor authentication, which provides an additional security layer that does not depend only on the password. Another option is to resort to the login with access keys, if available.