Tabnabbing is a phishing technique increasingly used by cybercriminals to steal personal information and credentials without the user noticing. While not new, its growing sophistication and low detection rate make it a rising threat in today’s digital landscape.
In this article, we explain what tabnabbing is, how it works, and what you can do to protect yourself.
What Is Tabnabbing?
Tabnabbing is a type of phishing attack that takes advantage of a common internet habit: keeping multiple browser tabs open at once. When one of those tabs becomes inactive for a while, a cyberattacker can manipulate it to display a fake version of a legitimate site — like your bank, email, or social media.
When the user returns to that tab, they don’t suspect anything has changed and proceed to log in or enter personal data — unknowingly handing over that information directly to the attacker.
How Does Tabnabbing Work?
-
The user browses the web with multiple tabs open.
-
One of those inactive tabs is automatically replaced by a malicious website.
-
The fake site mimics a trusted platform (e.g., Gmail, Outlook, a bank).
-
The user returns to the tab and, seeing no red flags, enters their login details.
-
The attacker captures this information and may use it for fraud or unauthorized access.
How to Avoid a Tabnabbing Attack
Prevention is key in cybersecurity. At METRICA, we recommend these three basic tips to protect yourself from tabnabbing:
Close tabs you’re not using. The fewer tabs open, the lower the risk.
Always check the URL before entering any personal data or passwords.
Watch out for unusual page signs like typos, outdated layouts, or unexpected requests.
These best practices don’t just help prevent tabnabbing — they’re useful for avoiding many types of phishing and other digital threats.
METRICA’s Commitment to Cybersecurity
At METRICA, we’re committed to fostering a culture of digital safety — both at the corporate and individual levels. Yesterday, we shared an informative social media post about tabnabbing as part of our ongoing cybersecurity awareness efforts.
Follow us on LinkedIn and Instagram to stay informed about emerging threats and receive practical tips for safer browsing.
Conclusion
Tabnabbing is a subtle but effective deception technique. Detecting it early and taking preventive action can mean the difference between keeping your information safe or falling for a scam.
Being informed is our best defense. At METRICA, we work every day to help you understand, identify, and prevent the digital risks that surround us.
