Board Thread:General Discussion/@comment--20150814190019/@comment-5973717-20150815235241

Sinthoniel wrote: Is phishing even possible with just CSS?

I'm not sure if anyone has ever succeeded at phishing, but there's other things you can do. For example, if a browser security flaw is found in a browser's image parser; just modify the CSS page to bring up a background image which uses an exploit. Fairly simple.