Google's will ban 'middle man' logins in latest crackdown on phishing

Google's latest attempt to crack down on phishing: Firm says it will ban logins that use embedded browsers to cut out the 'middle man' In June, Gmail will require users to use dedicated mobile browser to log in   The move is in an effort to prevent harmful phishing scams targeting credentials Phishing expeditions have become increasingly more complex over the years Google has released a host of new security features in recent months  

By James Pero For Dailymail.com

Published: 23:20 BST, 19 April 2019 | Updated: 23:20 BST, 19 April 2019

View
comments

Google is trying to cut out the 'middle man' by disallowing logins from embedded browsers -- a move they will add an extra layer of cyber security. 

According to the company, the change will start in June and will prevent logins that don't take place within a dedicated web browser like Safari, Chrome, or Firefox. 

While many applications use embedded browsers as a means of convenience, allowing users to stay in an app to input their credentials as opposed to having to jump to a dedicated mobile browser, Google said the feature puts users at unneeded risk. 

Google has bolstered a number of security features to help protect its users from phishing and more. According to the company, the change will start in June and will prevent logins that don't take place within a dedicated web browser like Safari, Chrome, or Firefox

Google has bolstered a number of security features to help protect its users from phishing and more. According to the company, the change will start in June and will prevent logins that don't take place within a dedicated web browser like Safari, Chrome, or Firefox

A major concern, said the company, is a type of phishing scam known as 'man in the middle.' 

'One form of phishing, known as "man in the middle" (MITM), is hard to detect when an embedded browser framework... or another automation platform is being used for authentication,' reads a blog post. 

'MITM intercepts the communications between a user and Google in real-time to gather the user’s credentials (including the second factor in some cases) and sign in.'

Because Google can't differentiate between someone attempting to phish an account and the legitimate owner, it has decided to completely scrap embedded logins, said the company. 

Similarly, Google has also introduced 'safe

read more from dailymail.....

PREV Elon Musk's X hit with worldwide outage for more than one hour that impacted ... trends now
NEXT PlayStation 5 Pro will be an 'enormous' jump in tech with 8K resolutions and ... trends now