Those “Allow” pop-ups aren’t harmless. Some browser permissions can spam you, track you, or expose your data—often more quietly than malware.

One particularly sneaky scam is a browser-in-the-browser (BitB) attack, in which threat actors create a fake browser window that looks like a trusted single sign-on (SSO) login page within a real ...