⚠ DEMO 07 — Fullscreen Phishing | Authorized research only
FULLSCREEN PHISHING
FULLSCREEN API · FAKE CHROME
Page requests fullscreen then renders fake browser chrome with spoofed URL bar.
Users believe they are on accounts.google.com while entering credentials on attacker page.
[ TRIGGER FULLSCREEN ATTACK ]
Click to simulate "Watch Video" bait:
[*] Fullscreen attack not yet triggered...
🔒 https://accounts.google.com/signin
Sign in
Use your Google Account
Defense: Browsers show "Press Esc to exit"; users must verify URL. Fullscreen API requires user gesture.