A new form of cyber-attack called CommetJacking has been discovered in the Comet web browser. This technique can secretly capture individual's emails without their knowledge.
What is CommetJacking?
CommetJacking functions by taking advantage of a bug regarding how the Comet browser is handling web requests. Most of the time, a web browser should load a specified webpage per the request, but with this bug, hackers can:- Collect email info from the Comet browser.
- Send this info to their servers.
What is so bad about it?
Emails often carry sensitive things such as:- Password reset links.
- Banking info.
- Private conversations.
Will it be fixed?
Yes. Researchers already let Comet staff know about the problem. They will have a patch in a few days. In the meantime, you should be vigilant, especially:- Use a different browser for your e-mail.
- Do not log into anything important while using Comet.
- Whenever possible, update your browsers.