Web Hack List

Preliminary research

Abusing Modern Browser Features for Phishing

AI-collected research leads through 2 October 2026, including bounded month-by-month reviews of selected social and community sources from March through September. Unranked, incomplete, not community-vetted, and subject to change.

Combines a WebGL workload that delays fullscreen UI, a framed Google One Tap prompt that personalizes the lure, and Keyboard Lock to obstruct escape. The result is a browser-only phishing flow that imitates an operating-system login while suppressing several user-facing warning cues.

Record

Researcher
Wolfgang Ettlinger and Alexander Hurbean

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Wolfgang Ettlinger and Alexander Hurbean, first published at the original source. Preserved copies are kept so the citation survives its host.