Hackers have erotice photos on instagrmdiscovered a new way to remotely take control of your computer — all through the Google Chrome web browser.
A report from cybersecurity company SquareX lays out the new multifaceted cyberattack, which the firm has dubbed "browser syncjacking."
At the core of the attack is a social engineering element, as the malicious actor first must convince the user to download a Chrome extension. The Chrome extension is usually disguised as a helpful tool that can be downloaded via the official Chrome Store. It requires minimal permissions, further cementing its perceived legitimacy to the user. According to SquareX, the extension actually does usually work as advertised, in order to further disguise the source of the attack from the user.
Meanwhile, secretly in the background, the Chrome extension connects itself to a managed Google Workspace profile that the attacker has set up in advance. With the user now unknowingly signed into a managed profile, the attacker sends the user to a legitimate Google support page which is injected with modified content through the Chrome extension, telling the user they need to sync their profile.
When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing history, and autofill information, to the hacker's managed profile. The hacker can then sign into this managed profile on their own device and access all that sensitive information.
The attack up to this point already provides the hacker with enough material to commit fraud and other illicit activities. However, browser syncjacking provides the hacker with the capability to go even further.
Using the teleconferencing platform Zoom as an example, SquareX explains that using the malicious Chrome extension, the attacker can send the victim to an official yet modified Zoom webpage that urges the user to install an update. However, the Zoom download that's provided is actually an executable file that installs a Chrome browser enrollment token from the hacker's Google Workspace.
After this occurs, the hacker then has access to additional capabilities and can gain access to the user's Google Drive, clipboard, emails, and more.
The browser syncjacking attack doesn't stop there. The hacker can take one further step in order to not just take over the victim's Chrome profile and Chrome browser, but also their entire device.
Through that same illicit download, such as the previously used Zoom update installer example, the attacker can inject a "registry entry to message native apps" by weaponizing Chrome’s Native Messaging protocol. By doing this, the attacker basically sets up a connection "between the malicious extension and the local binary." Basically, it creates a flow of information between the hacker's Chrome extension and your computer. Using this, the hacker can send commands to your device.
What can the hacker do from here? Pretty much anything they want. The attacker will have full access to the user's computer files and settings. They can create backdoors into the system. They can steal data such as passwords, cryptocurrency wallets, cookies, and more. In addition, they can track the user by controlling their webcam, take screenshots, record audio, and monitor everything input into the device.
As you can see, browser syncjacking is nearly completely unrecognizable as an attack to most users. For now, the most important thing you can do to protect yourself from such a cyberattack is to be aware of what you download and only install trusted Chrome extensions.
Topics Cybersecurity Google
Getting Started with Gmail Keyboard Shortcuts
Mark Zuckerberg's 'killer use case' for the metaverse is dumb as hell
Apple cuts iPad production to satisfy iPhone demand, report claims
Will Ferrell is the latest public figure to delete Facebook
Celtic vs. Bayern Munich 2025 livestream: Watch Champions League for free
Bumble is campaigning to make cyberflashing illegal in England and Wales
Adorable boy crawls into bathroom stall to ask for help washing hands
Tiffany Haddish says she witnessed an actress bite Beyoncé's face
Golden State Warriors vs. Los Angeles Lakers 2025 livestream: Watch NBA online
No, Emma González did not rip up the U.S. Constitution
Dallas Mavericks vs. Boston Celtics 2025 livestream: Watch NBA online
Rick Santorum walks back 'CPR' comment but repeats the same mistake
Steve Carell improvised one of the best lines in Season 5 of 'The Office'
Craigslist ad seeking attorney for 'difficult client' in D.C. is the ultimate Trump troll
Best MacBook deal: Save $200 on 2024 M3 MacBook Air
'Bob's Burgers' Halloween episodes, ranked
'Squid Game' cryptocurrency turns out to be a scam, creators run off with millions
Tiffany Haddish says she witnessed an actress bite Beyoncé's face
NYT Connections Sports Edition hints and answers for February 15: Tips to solve Connections #145
Netflix's 'The Harder They Fall' is a stirring spectacle
Whiskey, Alexa, and me: A night alone in the woods with digital assistantsWorld's oldest person dies, giving title to Japanese supercentenarianNintendo hid a copy of the NES game 'Golf' on every SwitchVideo shows Cassini team reacting to the spacecraft's death at SaturnSean Spicer showed up at the Emmys and no one knew what to doApple is introducing fast charging for the iPhone X ... but you'll have to pay extra for itColin Kaepernick, shunned by the NFL, named Week 1 MVP by the player's unionThe future of obnoxiously loud autoplay videos is in doubtBanksy is back with artwork that expertly skewers how institutions treat street artGoogle quietly added a new video feature to Google MapsA startup just sued Google for censoring its 'free speech' social network'mother!' gets a rare F grade from CinemaScore, but what does that really mean?So, that viral 'hot cop' seems to have a soft spot for antiAll of the Rick and Morty swag you could ever wantThese 'double jeans' are basically an optical illusion that'll cost you $695Claire Foy crowned the new 'Girl with the Dragon Tattoo'So, that viral 'hot cop' seems to have a soft spot for antiBlocking hate speech from isn't hard, tech companies just need to careAfter 50 years of history, Rolling Stone is up for saleChina orders all Bitcoin exchanges to close 'A Wrinkle in Time' will be free for underprivileged children at select theaters One Apple repair center has called 911 1,600 times in four months Hands on with the Samsung Galaxy S9 and Galaxy S9+ 50 Shades of No: A new t Energizer's Power Max PK16 Pro phone has a massive 16,000 mAh battery Download this: 'Alto's Odyssey' is the sequel we've been waiting for Three adorable sisters recreate 2018 Oscars Best Picture nominees 'Doomsday' Svalbard Global Seed Vault to get $13 million upgrade Nokia is bringing back the Matrix phone Stoneman Douglas alumni rise up in incredible ways to support shooting survivors This envelope was so teeny tiny it needed a bigger envelope to be sent Russia reportedly tried to pin the Olympics hack on North Korea Net neutrality will be officially dead in 2 months Teachers say #ArmMeWith classroom resources instead of guns Author Terry Goodkind 'pokes fun' at his book's cover art, ends badly Asus ZenFone 5 will trick people into believing you have an iPhone X It's farewell to iTunes on old Apple TVs, Window PCs Detective Pikachu's old man voice is a crime against nature New AR game 'Ghostbusters World' is like Pokemon Go, but with ghosts The moon may get its own 4G network in 2019
2.8338s , 8287.1875 kb
Copyright © 2025 Powered by 【erotice photos on instagrm】,Miracle Information Network