Google Sync
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager’s synced passkeys to take over accounts, bypass user verification, and extract passkey private keys. Passkeys are a passwordless authentication method that uses cryptographic keys stored on a user’s device to sign in to online accounts. They are […]
5 mins read