Tech Support Scammers Find New Trick to Hijack Chrome Browsers

Tech support scammers have come up with a devilish new trick to fool unsuspecting victims, relying on a cleverly crafted image and Chrome's fullscreen mode.

Their new tactic relies on crafting new tech support pages mimicking the visual style of the official Microsoft website.

When users navigate to this page via Chrome, hidden JavaScript code puts the victim's browser in fullscreen mode. While the browser's top UI toolbar is hidden, including the address bar, crooks load a JPEG image at the top of the page, crafted to look like Chrome's original UI bar.

Unless the user is using some sort of custom Chrome theme, a Chrome version with a different UI, or hovers their mouse near the top of the page, they won't be able to spot the difference.

Scammers will also spoof native Chrome popups

The Malwarebytes team spotted