REVERSE TABNABBING

window.opener · TAB HIJACK

Page opened via target="_blank" without rel="noopener" retains window.opener reference. Malicious page redirects original tab to phishing site while user reads new tab.

[ OPEN MALICIOUS LINK ]

Simulates clicking external link from your bank tab:

Read Security Article →

Link opens WITHOUT rel="noopener" (vulnerable)

[*] After opening link, this tab may be replaced with phishing page...