Browser-in-browser attacks use fake Meta Muse Ad lure to steal credentials

Browser-in-browser attacks are using fake Meta Muse Ad lures to steal credentials. Researchers have discovered a new technique where attackers create a new page mimicking the Meta login screen to trick users into entering their credentials.

The attack, dubbed 'browser-in-browser', occurs when a user is tricked into interacting with a fake login prompt within their browser, which is then used to steal their credentials.