Skip to content
The Cyber Security Place

Software

Pastejack attack turns your clipboard into a threat

Reported by theregister.co.uk

Once, you could use HTML/CSS to manipulate the clipboard, but it was not a good way to do so. Now a security bod has worked out how to do it in JavaScript and reckons it’s a lot more dangerous.

At first glance, it looks like purely a stunt-attack, except for this: a phishing e-mail purporting to be from tech support could trick a victim into dropping a message into a terminal window and executing it – not realising that what’s in the clipboard got changed on the way.

Read the full article at theregister.co.uk