Tim BrayYow, I just got successfully phished on the Facebook Android app. I clicked on "Your friend X tagged in a post" and this thing managed to put a browser window over the top of the FB app so it looked like I was still in the app, totally consistent style, and asked for a Facebook login, which I haven't done for years so I thought made sense. I fell for it, and I bet most people wouldn't have noticed it was sketchy, which I fortunately did; password hastily changed….
Andrea@timbray wow. FB probably uses https://developer.chrome.com/docs/android/custom-tabs/guide-get-started/ so that they can style the window and make it look like it belongs to the app, which is great for scammers I guess :/
