Wyo Support LLC

A new attack, dubbed Browser Syncjacking, has been identified, which allows attackers to take control of a victim's browser and device via a malicious Chrome extension. The attack starts with the creation of a fake Google Workspace profile, which hijacks the victim's browsing data. When the victim installs a seemingly legitimate extension, the attacker can silently access their browsing history and stored credentials. Over time, this access expands, leading to full browser and device control. This attack operates with minimal user interaction and requires no obvious signs for the victim to detect. It utilizes existing browser features to gain unauthorized access.