Browshing a new way of phishing using a malicious browser extension

Phishing is a well-known cybercrime. It is performed using various tricks and techniques including email spoofing, exploiting browser vulnerabilities, web spoofing, DNS poisoning, etc. This paper sheds light on a new technique that can be used by attackers to perform a successful phishing attack through malicious browser extensions. Successful experiments have been performed over the Google Chrome browser and the technique has been validated. This paper will help researchers and browser development companies to understand this specific phishing attack and to focus on research in the area of detection and mitigation of this phishing attack.