Hackers have Watch Anne with an E Season 1 Onlinediscovered a new way to remotely take control of your computer — all through the Google Chrome web browser.
A report from cybersecurity company SquareX lays out the new multifaceted cyberattack, which the firm has dubbed "browser syncjacking."
At the core of the attack is a social engineering element, as the malicious actor first must convince the user to download a Chrome extension. The Chrome extension is usually disguised as a helpful tool that can be downloaded via the official Chrome Store. It requires minimal permissions, further cementing its perceived legitimacy to the user. According to SquareX, the extension actually does usually work as advertised, in order to further disguise the source of the attack from the user.
Meanwhile, secretly in the background, the Chrome extension connects itself to a managed Google Workspace profile that the attacker has set up in advance. With the user now unknowingly signed into a managed profile, the attacker sends the user to a legitimate Google support page which is injected with modified content through the Chrome extension, telling the user they need to sync their profile.
When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing history, and autofill information, to the hacker's managed profile. The hacker can then sign into this managed profile on their own device and access all that sensitive information.
The attack up to this point already provides the hacker with enough material to commit fraud and other illicit activities. However, browser syncjacking provides the hacker with the capability to go even further.
Using the teleconferencing platform Zoom as an example, SquareX explains that using the malicious Chrome extension, the attacker can send the victim to an official yet modified Zoom webpage that urges the user to install an update. However, the Zoom download that's provided is actually an executable file that installs a Chrome browser enrollment token from the hacker's Google Workspace.
After this occurs, the hacker then has access to additional capabilities and can gain access to the user's Google Drive, clipboard, emails, and more.
The browser syncjacking attack doesn't stop there. The hacker can take one further step in order to not just take over the victim's Chrome profile and Chrome browser, but also their entire device.
Through that same illicit download, such as the previously used Zoom update installer example, the attacker can inject a "registry entry to message native apps" by weaponizing Chrome’s Native Messaging protocol. By doing this, the attacker basically sets up a connection "between the malicious extension and the local binary." Basically, it creates a flow of information between the hacker's Chrome extension and your computer. Using this, the hacker can send commands to your device.
What can the hacker do from here? Pretty much anything they want. The attacker will have full access to the user's computer files and settings. They can create backdoors into the system. They can steal data such as passwords, cryptocurrency wallets, cookies, and more. In addition, they can track the user by controlling their webcam, take screenshots, record audio, and monitor everything input into the device.
As you can see, browser syncjacking is nearly completely unrecognizable as an attack to most users. For now, the most important thing you can do to protect yourself from such a cyberattack is to be aware of what you download and only install trusted Chrome extensions.
Topics Cybersecurity Google
GPU Availability and Pricing Update: April 2022
New GOP bill would basically ban adult content, experts warn
'The Last of Us' Season 2, episode 5: The Joel flashback at the end, explained
Today's Hurdle hints and answers for May 14, 2025
Trump who? Tech giants join massive effort to uphold Paris Agreement
Best Lego deal: Save $6 on Lego Botanicals Chrysanthemum
Android 16: 4 game
Pixel devices to get more animated with Material 3 Expressive
Best GPU deal: Get the MSI RTX 5080 for $1,249.99 at Best Buy
'The Office' spinoff brings back a classic Scranton character
Precursors to Today's Technology: These Products Had the Right Vision
'The Last of Us' Season 2, episode 5 teases the Pearl Jam song
Today's Hurdle hints and answers for May 13, 2025
Dyson Supersonic deal: Save $100 on the blow dryer
Meta says some AGI systems are too risky to release
New Pope Leo XIV cites AI’s challenge to human dignity in his name choice
Best gaming laptop deal: Get the Asus ROG Zephyrus G16 for $520 off
Save 25% or more on select stays at Hotels.com
Then and Now: Six Generations of $200 Mainstream Radeon GPUs Compared
Robot vacuum deal: Save 43% on the Eufy 11S Max
3 scientists win Nobel Prize in medicine for biological clock research3 scientists win Nobel Prize in medicine for biological clock researchThe 13 best tweets of the week, including GameStop jokes, LMFAO, and ThanosRemastered 'Mass Effect' does something about those damn elevatorsTrump threatens North Korea and slams three past presidents in less than 140 charactersDisney+ greenlights Wakanda series from Ryan CooglerApple will invest $3.6 billion in Kia Motors to build an Apple Car, report saysApple's Black Unity Apple Watch is now available for purchaseTrump threatens North Korea and slams three past presidents in less than 140 charactersSorry haters, Macklemore's 'Same Love' just charted number one againDonald Trump dedicates President Cup golf trophy to hurricane victimsBumble launches LinkedInEverything coming to HBO Max in February 2021Dad finds out the hard way to not swear in front of his toddler'A Glitch in the Matrix' digs into simulation theory: Movie reviewAdventurous bunny riding public transit just wants to see LondonAmazon's British NFL commentary charms American football fansHow to learn calligraphy onlineWhatsApp is using Status to make users feel better about privacyHere's how to file an SEC complaint against a stock BBC Radio 1 investigated after airing sweary version of Flume song I made a spectacular vagina Google's Cardboard Camera for virtual reality comes to iOS Ford will sell you a self New banking app will let users pay before they even get a plastic card I drove 250 miles on one charge in the Chevy Bolt. This is the future of GM. People sharing Roald Dahl quotes on Twitter will brighten your day Dead fish falls from sky, smacking unsuspecting woman in the face Jeff Bezos just revealed his plans for Blue Origin's biggest rocket yet Earth just had its hottest August on record, NASA finds Boy tries to single Baby tortoises gather to snack on a hibiscus flower You're tearing me apart, Australia!: Tommy Wiseau threatens to sue film festival 'League of Legends' is popular, but not profitable as an esport Currency of the future hits UK streets, and it will survive a dunking Wes Anderson on the personal inspirations for 'The Phoenician Scheme' I'm learning code with Apple Swift Playgrounds Intense video shows the moment a diver was attacked by a great white shark The new Strike in 'Destiny: Rise of Iron' has an unkillable boss Samsung's next plan to prevent Note7 explosions is a software update
2.9373s , 10135.875 kb
Copyright © 2025 Powered by 【Watch Anne with an E Season 1 Online】,Evergreen Information Network