Type secrets only if you see the pink thumb!
Pink Thumb displays a pink thumb next to the address bar, when you browse to a website that is on your trusted website list in the extension's config file.
Pink Thumb will warn you with an alert sign next to the address bar, when you browse to a website that contains a password field and is not in your trusted website list.
With that Pink Thumb covers many phishing scenarios and visualizes risks while surfing the Internet and when clicking on phishing links.
Pink Thumb also has a 'secret' Microsoft Defender for Endpoint feature which you can turn on in the config file. With that feature turned on, Pink Thumb will send signals to your Microsoft Defender for Endpoint instance.
See the following blogpost for more information:
https://emptydc.com/2022/12/05/pink-thumb-2023
With Pink Thumb you will be able to distinguish between for example:
accounts.googie.com
and
accounts.google.com
If you click on the first link in a phishing email, you might not recognize that this is not the Google login page, but a phishing site. Pink Thumb will warn you in such scenarios.
Configure the JSON with all the important website (Banking, Facebook, etc.) that you are providing secrets to regularly so that you know, something strange is going on, when you think you are logging into a known page and Pink Thumb displays an alert icon.
Type secrets only if you see the pink thumb!
Follow me on Twitter: @jangeisbauer
