Jérôme SeguraJan 30, 2023

The #malvertising campaigns via Google Ads are not just about software downloads and scams. They also include phishing for popular password managers such as 1Password.

The differences are so subtle, most people will fall for it.

Real URL:
https://my[.]1password.com/signin
Phishing URL:
https://my1pasword[.]com/signin

Show threadJenny S-TJan 31, 2023
@malwareinfosec #Alt4me
Show threadStephen 
@jennyst @malwareinfosec First Image: A google search for '1password' with the top two ad results highlighted, the first being marked as the 'Real' 1password website, the second 'Fake' site 'startonepassword dot com'
Second Image: A compilation of two screenshots, top and bottom. At the top, the real my.1password.com site login page. At the bottom, a fake website which looks nearly identical, but with a blue text box reminder to use a secret key from the emergency kit
#Alt4You
Jan 31, 2023 at 4:56pmWeb