Tabnabbing: the phishing threat few internet users know about

A threat that remains largely unknown to internet users.

Do you know about tabnabbing? If not, the following is worth your attention. This form of phishing can deceive even web users who are cautious and aware of online risks. Here is what you need to know about this emerging danger, which is almost certainly already present in France.

How does tabnabbing work?

Spanish outlet El Periodico has reported on a warning issued by police on social media. In practical terms, this phishing technique specifically takes advantage of browser tabs that you have left open but are no longer using.

As explained, “the cybercriminal will replace one of the websites you have open with a malicious copy that looks similar”. Should you return to that page later, it will appear unchanged, yet it will actually be a fake designed to collect your personal or banking details. A moment of inattention can therefore be enough for criminals to access and empty your account.

In short, cybercriminals set up a fraudulent website. Once its tab is inactive, a script swaps its content for a fake sign-in page, encouraging the user to enter details that are then stolen.

How to protect yourself from tabnabbing

To limit the risk, law enforcement advises users to “keep open only the windows you are using and close all the others”. You should also “check again the URL of websites that ask for your data”. If you have any doubts, close the window straight away and do not provide any of the requested information.

Phishing remains popular with cybercriminals

As we regularly explain on Presse-citron, phishing is still the hacking method most commonly used by malicious actors. In a 2024 report, Europol noted that these attacks are becoming increasingly sophisticated. Tabnabbing clearly falls into that category, since almost anyone could be caught out through a lapse in attention.

As Benzinga points out, the US Federal Bureau of Investigation (FBI) has also warned internet users about the growing number of websites created to steal personal information or install malware. This is particularly the case with dubious free-download platforms and streaming websites. Remaining vigilant is therefore more important than ever. Given these risks, we also recommend choosing an antivirus solution suited to your needs. For further guidance, feel free to consult our guide here.