Collected research

Chronofeit Phishing

James Kettle · skeletonscribe.net

Chronofeit combines RSnake's popup and focus URL hijacking with Paul Stone's frame-based login detection: the victim checks a genuine login URL, and the page is swapped for a phishing clone in the interval between that check and submitting credentials. Polling detects the moment of login, then redirects to a fake password-incorrect page.

Record

Researcher

James Kettle

Published by

skeletonscribe.net

Topic

Other

In the archive

• Collected in the 2010 research round

Related sources

• Chronofeit phishing

Tags

• iframe
• clickjacking
• ui-redress
• side-channel
• detection
• url-parsing
• owasp-a04-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.