The alarming increase in email account takeovers led Google to issue an alert, given that cybercriminals are now not only stealing passwords but also capturing authentication codes and even session cookies.

With this advancement in their methodology, attackers can take control of an account without having to overcome additional security measures.

According to Chrome Sync, “browser syncing is incredibly convenient… and dangerously pervasive. When you turn on syncing in Chrome, Google stores a massive amount of your private data in the cloud: browsing history, open tabs, passwords, payment methods, addresses, phone numbers, information stored in Google Pay, etc.” In other words, the user’s digital life.

If you add to this the fact that Chrome functions as a universal password manager, if a hacker gains access to your account, it “opens the door to banking services, social networks, online stores, work tools, and any platform whose data is stored in the browser.”

A similar situation occurs with cookie theft, a technique that is gaining ground and allows attackers to “bypass login mechanisms and behave as if they were you, without the system detecting anything unusual.”

The good news is that users can protect themselves. One of the main safeguards is to disable Chrome Sync or use the “Custom sync” option to exclude particularly sensitive data such as passwords and payment information.

In addition, Google reminds users that “it is possible to encrypt all synced information using a passphrase. While this option does disable some features—such as Smart Lock—it significantly increases security. It’s a small sacrifice in exchange for preventing an intrusion from compromising your entire digital identity.”

For its part, Google is implementing new tools to mitigate attacks, even after data has been stolen, such as passkeys, Device Bound Session Credentials (currently in beta), and the new Shared Signals Framework, which will allow Google to react automatically when partner platforms detect suspicious activity.

M.Pino

Source: muycomputer

(Reference image source: Krsto Jevtic on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Google issues alert over increase in account takeovers apareció primero en Bitfinance.

Password theft continues to rise. According to recent data, the Snakestealer malware scheme is leading the attacks.

“The malicious code known as infostealer is topping the list of the most frequent attacks worldwide. These programs infiltrate computers and devices undetected, with the sole purpose of stealing personal data, login credentials, and even banking information.”

The SnakeStealer variant has the most detections, according to recent security reports. This is a well-known malware family that has grown in the criminal world due to “its effectiveness and ease of access, making it the preferred tool of cybercriminals.”

“SnakeStealer’s distribution model is based on the malware-as-a-service (MaaS) scheme, a format similar to that of legitimate commercial software, but offered on underground forums.” In other words, this means that anyone, even without advanced programming knowledge, can rent or purchase the malware and deploy large-scale attacks.

According to specialists, SnakeStealer is so lethal because it can disable processes related to antivirus and malware analysis tools, avoiding detection. Furthermore, it “verifies whether the victim computer is being monitored in a virtual machine, to avoid being analyzed by security experts. Once installed, it seeks to ensure its permanence by modifying the Windows operating system’s boot records.”

What follows from this phase is the theft of sensitive information, such as passwords saved in browsers, email clients, messaging apps like Discord, and even Wi-Fi networks stored on the computer.

As if that weren’t enough, the malware can record the user’s keystrokes (keylogging), capture screenshots, and copy data from the clipboard.

This stolen information can be sent via different means: it can be transmitted through FTP servers, sent through a Telegram channel, or even sent as a compressed attachment in an email.

Security tips to prevent an attack

Preventive measures to reduce the risks of this infostealer include keeping operating systems and programs always updated. “Likewise, it is essential to have reliable security solutions installed on computers and mobile devices.” Regarding email, stay alert to attachments and links received from unknown senders. And if you receive suspicious communications from recognized companies or institutions, the safest thing to do is to verify them directly through their official channels.

M.Pino

Source: infobae

(Reference image source: Volodymyr Kondriianenko on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Snakestealer leads password theft in 2025 apareció primero en Bitfinance.