Browser Spoofing

Abstract

This paper presents an attack which spoofs a browser in the client’s machine. When a client visits the attacker’s site, or the attacker hijacks a connection, a malicious HTML file will be downloaded to the client’s machine. This file instructs to create a spoofing browser including a faked window and event processing methods. The bogus window, having the same appearance as the original browser window, shows the web content of the target site. But the bogus methods provide malicious activities besides the genuine one. From the viewpoint of the client, the browser is still trustworthy although it is at the fully control of the attacker. This spoofed browser can cheat the client even a “secure” connection is built. We design a simple system to demonstrate the attack.