This changes how I’ll look at login pop-ups from now on. 😭

Never use Google to login to a website. Ever. I mean it.

This is why 2F pisses me tf off. It does NOTHING but inconvenience and take your phone number. Stop it. Stick to email verification code sends and that’s it.

This only works on Mac? lmao My Linux desktop theme and browser are not close to the standard, so I'm safe

One way to make this easily detectable on Windows is to use some 3rd party software that changes the appearance of your window frames in a significant way.

Don't click "Sign in with Google" on sites, problem solved. Site copying/spoofing has been going on since before 2000. Used to be able to upload small RATs via javascript. Copy site, insert code, if they click, they're getting it. You have to have a host for the trojan.

This bullshit has been around for ages and it's so easy to spot.

Use Linux

I got hit with two of these in the last month.

*yawn* It won't trick my hardware passkey...

Yeah I made that and sold it to the indians

@tay_squared__

autofill won't work on it either

That won't be password managers tho

@Keyeshia_

Pretty sure that every login page does, or shouldm block being displayed in an iframe which is exactly what 99% of all these scams use. So whenever you see a login page pop up in a new window, better triple check it's an actual real window and not a rectangle with an iframe.

DAMN