Security News

Google Chrome rolls back FPS Meter changes after user complaints
2021-02-23 22:54

Google has brought the FPS, or frame rate, reading back to the Google Chrome FPS meter after users were upset about its removal. Google Chrome includes a tool called 'FPS Meter' that allowed users to see the frame rate of a web page they were visiting.

Google Chrome's FPS meter shows frame rate again after complaints
2021-02-23 22:54

Google has brought the FPS, or frame rate, reading back to the Google Chrome FPS meter after users were upset about its removal. Google Chrome includes a tool called 'FPS Meter' that allowed users to see the frame rate of a web page they were visiting.

New Chrome for iOS feature locks Incognito tabs with Face ID
2021-02-21 13:31

Google Chrome for iOS is getting a new privacy feature that lets you lock your opened Incognito tabs behind your iPhone's Face ID or Touch ID biometric authentication features. If a user leaves their phone unlocked, someone can launch Chrome and view the currently open Incognito mode tabs.

Chrome for iOS will let you lock Incognito mode with Face ID
2021-02-21 13:31

Google Chrome for iOS is getting a new privacy feature that lets you lock your opened Incognito tabs behind your iPhone's Face ID or Touch ID biometric authentication features. If a user leaves their phone unlocked, someone can launch Chrome and view the currently open Incognito mode tabs.

Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials
2021-02-19 01:18

A credential stealer infamous for targeting Windows systems has resurfaced in a new phishing campaign that aims to steal credentials from Microsoft Outlook, Google Chrome, and instant messenger apps. Primarily directed against users in Turkey, Latvia, and Italy starting mid-January, the attacks involve the use of MassLogger - a.NET-based malware with capabilities to hinder static analysis - building on similar campaigns undertaken by the same actor against users in Bulgaria, Lithuania, Hungary, Estonia, Romania, and Spain in September, October, and November 2020.

Masslogger Swipes Microsoft Outlook, Google Chrome Credentials
2021-02-17 16:31

Cybercriminals are targeting Windows users with a new variant of the Masslogger trojan, which is spyware designed to swipe victims' credentials from Microsoft Outlook, Google Chrome and various instant-messenger accounts. When the Masslogger variant launched its infection chain, it disguised its malicious RAR files as Compiled HTML files.

Google Chrome, Microsoft Edge getting this Intel security feature
2021-02-14 21:00

Chromium-based browsers such as Microsoft Edge and Google Chrome will soon support the Intel CET security feature to prevent a wide range of vulnerabilities. Intel's Control-flow Enforcement Technology is a hardware security feature initially introduced in 2016 and added to Intel's 11th generation CPUs in 2020.

S3 Ep19: Chrome zero-day, coffee hacking and Perl.com stolen [Podcast]
2021-02-11 19:16

We delve into Google's tight-lipped Chrome bugfix, explain how a Belgian researcher awarded himself 111,848 cups of coffee, and discuss the audacious but thankfully temporary theft of the Perl.com domain. WHERE TO FIND THE PODCAST ONLINE. You can listen to us on Soundcloud, Apple Podcasts, Google Podcasts, Spotify, Stitcher, Overcast and anywhere that good podcasts are found.

Fake Forcepoint Google Chrome Extension Hacks Windows Users
2021-02-08 17:24

Cybercriminals have been using a novel approach to exfiltrate data that involves directly injecting malicious Google Chrome extensions onto victims' Windows machines via the abuse of Google's cloud synching function. The malicious add-on is disguised as a "Forcepoint Endpoint Chrome Extension for Windows," with the attackers using the security company's logo to enhance an air of legitimacy.

Attackers Leverage Locally-Loaded Chrome Extension for Data Exfiltration
2021-02-08 09:42

A recently investigated malicious attack was abusing a locally loaded Chrome extension to exfiltrate data and establish communication with the command and control server. While the use of malicious Chrome extensions in attacks is not something new, this attack stands out from the crowd due to the use of 'Developer mode' in the browser to enable loading of a malicious extension locally.