A new phishing campaign is targeting Apple iOS users and could be adapted for Android devices, security researchers have warned. The campaign targeting mobile users leads to a malicious page, prompting the user to authenticate using Facebook social login from a website that looks like Airbnb, researchers at Myki say. The latest attack works as follows:Upon clicking the 'Login with Facebook' button, the user is prompted by the OS to confirm their intent to use Facebook to login. Safari launches a new tab and the user is prompted to authenticate on Facebook. Meanwhile, 18.32% of unique users encountered phishing.
Source: Forbes March 12, 2019 12:05 UTC