Hackers have Esther Studerdiscovered a new way to remotely take control of your computer — all through the Google Chrome web browser.
A report from cybersecurity company SquareX lays out the new multifaceted cyberattack, which the firm has dubbed "browser syncjacking."
At the core of the attack is a social engineering element, as the malicious actor first must convince the user to download a Chrome extension. The Chrome extension is usually disguised as a helpful tool that can be downloaded via the official Chrome Store. It requires minimal permissions, further cementing its perceived legitimacy to the user. According to SquareX, the extension actually does usually work as advertised, in order to further disguise the source of the attack from the user.
Meanwhile, secretly in the background, the Chrome extension connects itself to a managed Google Workspace profile that the attacker has set up in advance. With the user now unknowingly signed into a managed profile, the attacker sends the user to a legitimate Google support page which is injected with modified content through the Chrome extension, telling the user they need to sync their profile.
When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing history, and autofill information, to the hacker's managed profile. The hacker can then sign into this managed profile on their own device and access all that sensitive information.
The attack up to this point already provides the hacker with enough material to commit fraud and other illicit activities. However, browser syncjacking provides the hacker with the capability to go even further.
Using the teleconferencing platform Zoom as an example, SquareX explains that using the malicious Chrome extension, the attacker can send the victim to an official yet modified Zoom webpage that urges the user to install an update. However, the Zoom download that's provided is actually an executable file that installs a Chrome browser enrollment token from the hacker's Google Workspace.
After this occurs, the hacker then has access to additional capabilities and can gain access to the user's Google Drive, clipboard, emails, and more.
The browser syncjacking attack doesn't stop there. The hacker can take one further step in order to not just take over the victim's Chrome profile and Chrome browser, but also their entire device.
Through that same illicit download, such as the previously used Zoom update installer example, the attacker can inject a "registry entry to message native apps" by weaponizing Chrome’s Native Messaging protocol. By doing this, the attacker basically sets up a connection "between the malicious extension and the local binary." Basically, it creates a flow of information between the hacker's Chrome extension and your computer. Using this, the hacker can send commands to your device.
What can the hacker do from here? Pretty much anything they want. The attacker will have full access to the user's computer files and settings. They can create backdoors into the system. They can steal data such as passwords, cryptocurrency wallets, cookies, and more. In addition, they can track the user by controlling their webcam, take screenshots, record audio, and monitor everything input into the device.
As you can see, browser syncjacking is nearly completely unrecognizable as an attack to most users. For now, the most important thing you can do to protect yourself from such a cyberattack is to be aware of what you download and only install trusted Chrome extensions.
Topics Cybersecurity Google
Precursors to Today's Technology: These Products Had the Right Vision
NASA's brand new image of Saturn will blow your mind
Did Dashboard Confessional inspire this Taylor Swift lyric?
Instacart insists it's probably your fault if your account got hacked
China just built the world's biggest floating solar project
WNBA teams walk out during anthem, dedicate season to Breonna Taylor
Google tells employees to work from home until July 2021 amid pandemic
Donald Trump says he doesn't want a 'poor person' in the cabinet
Cyrix: Gone But Not Forgotten
One major question remains for Uber: Why is its head of HR still there?
Touring Logitech's Audio HQ
Watch Dr. Fauci throw a super socially distanced first pitch
Google to replace certain Nest thermostats that can't connect to Wi
First Atlantic hurricane of 2020 forms, churns towards Texas
Best Presidents' Day deal: Save $44 on Fitbit Charge 6
NASA's brand new image of Saturn will blow your mind
Facebook has a rainbow Pride reaction, but not everyone gets to use it
Steve Wozniak sues YouTube over Bitcoin scam videos
Best Presidents' Day deal: Save $250 on Peloton Bike
3 ways to stream movies and TV for free through your local library
Can the iPhone 8 avoid the Samsung Galaxy S8's one big mistake?This photo of Earth peeking out between Saturn's rings will make you feel small'Fantastic Beasts' sequel has found Newt's war hero brotherOops. You've been picking the wrong dating profile pics all this time.Space is a 'burrito of awesomeness' says our new favorite astronautInside the filthy chaos of Gorillaz's Brooklyn house party popSo you want to be a Google health lab rat? Here's what you'll have to doRIP bandage dresses: Bebe will close all its stores next monthA packet of that 'Rick and Morty' Szechuan sauce sells for a ridiculous amount of cashLittlefinger's 'Game of Thrones' scheme may get truly evil in season 7'Last Jedi' director moves scar on Kylo Ren's face, chaos ensuesKaty Perry might just be antiNewspaper succinctly trolls Trump's new pick for country ambassadorAll the best (and geekiest) signs from Marches for Science around the worldThe 'digital wellness lady' is on a mission to make you unplugUnited CEO reUber employees seem to think #Undelete is a great idea for graffitiAll the best (and geekiest) signs from Marches for Science around the worldGet ready for augmented reality *everythingSouth Korean presidential candidate makes an appeal to 'StarCraft' voters The internet can't decide whether these legs have white paint or oil on them The Microsoft Studio is powerful, but the Surface Dial is the real star This weird, tiny cylinder controls the new Surface Studio PC The LG V20 is a safe, dependable upgrade, after the failure of modular G5 smartphone Slow TV finds life online with Facebook Live and Periscope Watch Microsoft's 'Imagine what you'll do' event right here SpaceX's Starship shows resilience through brutally hot reentry to Earth How to get a free World Series taco from Taco Bell 'Keeping Up With the Kardashians' resumes production following Kim's Paris robbery 'Great British Bake Off' finale is tonight, and British Twitter is going to explode Puppy swallows a garden windmill and the X Tom Hanks wants in on the 'Splash' remake with Channing Tatum Woman writes bad Yelp review because of a bodega cat, and the internet destroys her Microsoft announces a super sleek and powerful all Man charged with attempted murder after entering Miranda Kerr's house Ciara and Russell Wilson confirm that a baby is on the way Golden State Warriors lose their first game and people absolutely love it Kesha recorded 22 songs she would absolutely love to unleash on the world SNL's Pete Davidson says Kid Cudi saved his life The northern lights might put on a serious show tonight
1.6739s , 8229.5234375 kb
Copyright © 2025 Powered by 【Esther Studer】,Feast Information Network