Hackers have Mission XXX Impossiblediscovered a new way to remotely take control of your computer — all through the Google Chrome web browser.
A report from cybersecurity company SquareX lays out the new multifaceted cyberattack, which the firm has dubbed "browser syncjacking."
At the core of the attack is a social engineering element, as the malicious actor first must convince the user to download a Chrome extension. The Chrome extension is usually disguised as a helpful tool that can be downloaded via the official Chrome Store. It requires minimal permissions, further cementing its perceived legitimacy to the user. According to SquareX, the extension actually does usually work as advertised, in order to further disguise the source of the attack from the user.
Meanwhile, secretly in the background, the Chrome extension connects itself to a managed Google Workspace profile that the attacker has set up in advance. With the user now unknowingly signed into a managed profile, the attacker sends the user to a legitimate Google support page which is injected with modified content through the Chrome extension, telling the user they need to sync their profile.
When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing history, and autofill information, to the hacker's managed profile. The hacker can then sign into this managed profile on their own device and access all that sensitive information.
The attack up to this point already provides the hacker with enough material to commit fraud and other illicit activities. However, browser syncjacking provides the hacker with the capability to go even further.
Using the teleconferencing platform Zoom as an example, SquareX explains that using the malicious Chrome extension, the attacker can send the victim to an official yet modified Zoom webpage that urges the user to install an update. However, the Zoom download that's provided is actually an executable file that installs a Chrome browser enrollment token from the hacker's Google Workspace.
After this occurs, the hacker then has access to additional capabilities and can gain access to the user's Google Drive, clipboard, emails, and more.
The browser syncjacking attack doesn't stop there. The hacker can take one further step in order to not just take over the victim's Chrome profile and Chrome browser, but also their entire device.
Through that same illicit download, such as the previously used Zoom update installer example, the attacker can inject a "registry entry to message native apps" by weaponizing Chrome’s Native Messaging protocol. By doing this, the attacker basically sets up a connection "between the malicious extension and the local binary." Basically, it creates a flow of information between the hacker's Chrome extension and your computer. Using this, the hacker can send commands to your device.
What can the hacker do from here? Pretty much anything they want. The attacker will have full access to the user's computer files and settings. They can create backdoors into the system. They can steal data such as passwords, cryptocurrency wallets, cookies, and more. In addition, they can track the user by controlling their webcam, take screenshots, record audio, and monitor everything input into the device.
As you can see, browser syncjacking is nearly completely unrecognizable as an attack to most users. For now, the most important thing you can do to protect yourself from such a cyberattack is to be aware of what you download and only install trusted Chrome extensions.
Topics Cybersecurity Google
Best Amazon deal: Save 20% on floral and botanical Lego sets
Best AirPods deal: Save $71 on Apple AirPods Max
NYT mini crossword answers for February 12, 2025
Best Apple Watch deal: Save $70 on Apple Watch 10
New 'browser syncjacking' cyberattack lets hackers take over your computer via Chrome
Southwest From Our Heart to Yours Sale : $59 fares
How to celebrate Valentine's Day online
Detroit Pistons vs. Chicago Bulls 2025 livestream: Watch NBA online
Assassin's Creed Origins: How Heavy is It on Your CPU?
TikTok’s latest trend is having coffee with your past self
Amazon CEO tries to sell kids on working on the moon
Duolingo 'kills' its owl mascot Duo. The internet had jokes and memes.
Best Echo Dot deal: Save $10 at Amazon
iOS 18.3.1 update patches a physical iPhone exploit
Trump praises storm response as historic disaster unfolds in Houston
Cruz Azul vs. Real Hope 2025 livestream: Watch Concacaf Champions Cup for free
NYT Connections Sports Edition hints and answers for February 12: Tips to solve Connections #142
Best Echo Dot deal: Save $10 at Amazon
We'll always, er, sorta, have the Paris Climate Agreement
Detroit Pistons vs. Chicago Bulls 2025 livestream: Watch NBA online
Google adds authoritative info on COVIDKendall Jenner got a 'Fashion Icon of the Decade' award and people are not having itKim Kardashian is brutally honest about her feelings on Donald TrumpThe most hilarious 'Cyberpunk 2077' bugs we've seenNew report finds Christchurch shooter was radicalized on YouTube and FacebookSamsung's 110Here's how much the ideal Apple Fitness+ setup will cost youThis ongoing Twitter ghost story just got a whole lot weirderTrapped bakers make hundreds of loaves of bread for Harvey victimsYoung activists share tips for staying politically involvedThis woman's message exchange with her grandma has gone gloriously viral'Medal of Honor' in VR takes the training wheels off video game gunsHumanity dumped 37 billion tons of CO2 into the atmosphere in 202019 minimalist tattoos that will make you want to book an appointment now'New Girl' was a fun show with an anticlimactic endingNew report finds Christchurch shooter was radicalized on YouTube and FacebookHackers are targeting kindergartens for profit, warns governmentOlympian shares a photo of his hands after Arctic row and OMGYoung activists share tips for staying politically involvedHere's how much the ideal Apple Fitness+ setup will cost you Seahawks vs. 49ers 2024 livestream: How to watch NFL online Arkadium mini crossword answers for November 15 Best kitchen deal: A renewed Vitamix Explorian blender is just $199.95 at Amazon Wordle today: The answer and hints for November 17 Google is reportedly developing a ‘fake’ email feature to help you avoid spam Paraguay vs. Argentina 2024 livestream: Watch World Cup Qualifiers for free Wordle today: The answer and hints for November 15 Stuff Your Kindle Day Nov. 15: Free open door romance to black e Early Black Friday TV deals at Walmart include a $138 50 Utah vs. Colorado football livestreams: kickoff time, streaming deals, and more Best action camera deal: Get the DJI Osmo Action 4 on sale for $209.99 Rock once forgotten in a drawer plays key part in dating water on Mars MotoGP livestream: Watch the 2024 Barcelona Grand Prix for free 30 best Netflix shows to fall asleep to because wow we need some zzzzzs Wales vs. Australia 2024 livestream: Watch Autumn Internationals for free ChatGPT updates for Windows and macOS: Everything you need to know The Ninja Slushi sold out at Best Buy in minutes, but it's in stock elsewhere Falcons vs. Broncos 2024 livestream: How to watch NFL online Best Amazon deals of the day: M2 MacBook Air, Sony WH Arizona State vs. Kansas State football livestreams: kickoff time, streaming deals, and more
2.0345s , 8228.0546875 kb
Copyright © 2025 Powered by 【Mission XXX Impossible】,Charm Information Network