![\"Silhouette](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/07\/1752941885_225_960x0.jpg\")
<\/p>\n<\/p>\n
Beware these AI-powered web browser attacks.<\/p>\n
getty <\/p>\n
Imagine if your web browser presented a harmless page to security systems specifically looking for trouble, and a malicious page chock-full of it to you. Imagine no more, cloaking-as-a-service is here, and it\u2019s employing AI to serve up the attacks you can\u2019t see coming. Whereas you are likely au fait with news headlines warning of web browser vulnerabilities<\/a>, dodgy extensions and add-ons<\/a>, and assorted other nefarious security bypasses<\/a>, the chances are you have never heard of this one, despite it literally being a black and white browser attack. Welcome to the world of AI-powered<\/a> web page cloaking, where a \u2018black\u2019 malicious page is served up to ordinary users while a harmless \u2018white\u2019 page goes to those systems designed to protect you. Cloaking-as-a-Service prevents prying eyes from seeing the phishing threats and malware, while you get scammed.<\/p>\n Forbes98.5% Of Passwords Fail This Hacking Test \u2014 How Secure Is Yours?By Davey Winder<\/a> Hackers are now employing the same traffic-filtering techniques, now powered by AI, that were once the domain of shady online advertisers and marketing professionals seeking to exploit the system and boost conversion rates. Now, thanks to the use of Cloaking-as-a-Service platforms, threat actors are combining AI with scripting techniques, all at the click of a button and following a subscription payment, to turn malicious payloads in websites invisible as far as security tools are concerned, while displaying the phishing websites in their full glory to the intended victim.<\/p>\n SlashNext security researchers have revealed precisely how the threat works in a July 17 report<\/a>, and you better read this one as it\u2019s of concern to every web user. In a nutshell, the con works by presenting two different web pages, a black one and a white one, depending on who is viewing it. The harmless white page is shown to automated reviews, scanners and security tools trying to protect you, while the malicious black one gets served up to you, the potential victim.<\/p>\n The Cloaking-as-a-Service platforms ecosystem is driving the trend, designed to bring \u201cJavaScript fingerprinting, device and network profiling, machine learning analysis, and dynamic content swapping,\u201d the researchers said, \u201cinto user-friendly platforms that anyone (including criminals) can subscribe to.\u201d<\/p>\n And there lies the rub: the services themselves are not illegal, but some people are using them for illegal purposes. By using the cloaking systems, hackers are able to increase \u201cthe effectiveness of phishing sites, fraudulent downloads, affiliate fraud schemes and spam campaigns,\u201d the researchers warned, \u201cwhich can stay live longer and snare more victims before being detected.\u201d<\/p>\n ForbesFBI 2FA Bypass Warning Issued \u2014 The Attacks Have StartedBy Davey Winder<\/a><\/p>\n Mitigating The Invisible Web Browser AI Hack Threat<\/p>\n I have not named the platforms being exploited in this article, although you can read more in the referenced report, for the very reason as explained by Andy Bennett, chief information security officer at Apollo Information Systems: \u201cJust like threat actors use encryption, which is a core security technology, as a weapon to hold organization for ransom,\u201d Bennett said, \u201cit is no surprise that they are taking an approach designed to help opportunistic marketeers target and engage specific audiences and use it to target specific victims or evade detection.\u201d<\/p>\n That said, the threat itself does need to be addressed. It is, as Mayuresh Dani, security research manager at the Qualys Threat Research Unit, said, \u201ca critical evolution in the cyberthreat landscape demanding an immediate attention from security teams and organizations.\u201d<\/p>\n Dani recommends the following mitigations:<\/p>\n Behavioral and runtime analysis tools that can execute dynamic content analysis in real-time.
\nAI-Driven Traffic Filtering \u2014 Hiding Security Threats From Those Who Need To See Them<\/p>\n
\n AI-powered defensive solutions that can adapt to evolving attack patterns as needed to combat AI-powered threats.
\n Zero-trust principles that continuously validate all network activity, rather than relying on perimeter-based defenses.
\n Incident response procedures specifically designed for AI-enhanced threats.
\nForbesIf Your Password Is On This List, Change It Now \u2014 Do Not WaitBy Davey Winder<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"Beware these AI-powered web browser attacks. getty Imagine if your web browser presented a harmless page to security…\n","protected":false},"author":2,"featured_media":8446,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[62,276,277,49,48,8898,8906,8907,8903,8904,8900,8905,61,8901,8899,8902],"class_list":["post-8445","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-ca","tag-canada","tag-cloaking","tag-hack","tag-hacking","tag-hoax-tech","tag-js-click-cloaker","tag-phishing","tag-slashnext","tag-technology","tag-web-browser-hack","tag-web-cloaking","tag-website-hack"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/8445","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=8445"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/8445\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/8446"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=8445"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=8445"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=8445"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}