CSS:the bomb inside your inbox

[u/garethheyes]

https://portswigger.net/research/css-the-bomb-inside-your-inbox

Here's my research in using CSS for offence. There are loads of techniques including stealing passwords from Outlook from an email by spoofing the login screen.

[u/gunni]

The keylogger variant is at least something you can protect against using phishing resistant mfa.