A new phishing tool has hit the web, and will make it easier for scammers to fool users into giving up their details.
The Universal Man-in-the-Middle Phishing Kit allows hackers to set up afraudulent website as they would in a normal phishing scam, but with amajor difference: the fake site will connect to the legitimate target inreal time. This means that users can sign in and check their balance,etc, without realising the 'man-in-the-middle' is logging all thedata.
Although this is not a new exploit, the kit allows non-expert hackers toperform it, and can easily be configured for different targets. It isalso unusually competent at logging confidential data - apparently itwill record any type of credentials the user submits, rather than basiclogin and card-related credentials.
