Exemplifying Emerging Phishing: QR-Based Browser-in-the-Browser (BiTB) Attack

Lately, cybercriminals constantly formulate productive approaches to exploit individuals. This article exemplifies an innovative attack, namely QR-based Browser-in-The-Browser (BiTB), using proficiencies of Large Language Model (LLM) i.e. Google Gemini. The presented attack is a fusion of two emerging attacks: BiTB and Quishing (QR code phishing). Our study underscores attack’s simplistic implementation utilizing malicious prompts provided to Gemini-LLM API. Moreover, we presented a case study and performed an experiment to comprehend the attack execution. We also provided the performance evaluation of attack success by comparing Gemini-LLM with GPT and static website. The findings of this work obligate the researchers’ contributions in confronting this type of phishing attempts through LLMs.