https://connar.github.io/tags/bios/Recent content in Bios on Journal of ConnarHugo -- 0.147.3en-ushttps://connar.github.io/posts/biosphishing/Mon, 01 Jan 0001 00:00:00 +0000https://connar.github.io/posts/biosphishing/<p><em>Disclaimer: The research, attack chain concept, and logic presented in this post are my own. The HTML, CSS, and Javascript used to build the PoC template were developed with the help of Gemini.</em></p> <h2 id="browser-to-bios-phishing-attack">Browser-to-BIOS Phishing Attack</h2> <h3 id="what-is-the-simulated-tdr--bios-attack">What is the Simulated TDR / BIOS Attack</h3> <p>If we look back at how browser-based phishing has evolved over the years, we can clearly see the tactics changing from basic web popups to actual user manipulation. There were old techniques from scam support centers to more modern techniques such as Clickfix, but overall here is a quick timeline of what these attacks looked like:</p>