The method I posted is likely how this is happening. They redirect the image to a password protected page on their site and when their browser tries to retrieve it, the login box pops up. It's actually for the page the image is redirecting to, even though the user doesn't see any redirection.
Yes, so except Maxthon, all browsers fell into that... Ofcourse users does not see any redirection and there is no need for that external image to be redirected as well. It is just users not to notice it is not "forum user and password" required. So had to do something for it.<
New Threat of forum phishing
Posted - 13 December 2008 : 18:21:18
