So the entire attack is premised on me navigating to a fake robinhood domain and entering my credentials?
Seems like good password manager hygiene (which checks the domain name before filling credentials) can help prevent this from happening.
Seems like good password manager hygiene (which checks the domain name before filling credentials) can help prevent this from happening.
Unless it doesn't auto-fill, but it looks right, so you paste it anyway.