Fiddle with a URL and you can pop up and tell users to do anything
Technical support scammers have new bait with the discovery that Microsoft's Edge browser can be abused to display native and legitimate-looking warning messages.
The flaws exist in Microsoft's Edge protocols ms-appx: and ms-appx-web: which the browser uses to present warning messages when phishing or malware delivery sites are located.
When Edge detects suspected Malicious sites it colours them red with a feature called "SmartScreen."
Buenos Aires security tester Manuel Caballero says scammers can create warnings that replace SmartScreen text and phone numbers indicating that a nominated site also displayed in the address bar is infected.
"When we place a telephone-like number a link is automatically created so the user can call us with a single click - very convenient for these scammers," Caballero says.