“Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing

Trellix reports a rising, sophisticated phishing campaign leveraging the "Browser-in-the-Browser" (BitB) technique to present fake Facebook login pop-ups that visually mimic legitimate authentication flows while hardcoding deceptive address bars. Attackers host pages on reputable cloud platforms (Netlify, Vercel) and use URL shorteners to evade filters, pairing technical deception with social-engineering lures (fake legal notices, account violations, security alerts); defenders are urged to adopt multi-layered detection and not rely solely on URL checks.