Cybercriminals Are Using a New Method to Steal Google Passwords: Full-Screen Mode

Picture this: While casually browsing the web, your browser suddenly stops responding. All you can see is a full-screen login page that prompts you to enter your Google credentials to continue. This isn’t normal and shouldn’t happen. However, some people are experiencing this because, in fact, it’s actually a cyberattack.

According to researchers at OALabs, cybercriminals are using this new technique to steal usernames and passwords. The method is simple but highly effective. Victims unknowingly give their login details to malicious actors in order to proceed with their online activities.

A Cyberattack as New as It Is Effective

Amadey is a malware that infects the user’s system and allows a malicious utility called StealC to be loaded. Once the system is compromised, the browser goes into “kiosk mode,” displaying content in full screen and preventing the use of F11 or ESC keys to return to the Desktop.

Kiosk mode is a legitimate Chrome feature used at guest check-in counters or point-of-sale. However, the malware exploits this feature to limit the victim’s options, displaying a fake Google login page.

The page that invites users to enter their Google login credentials.

After the user enters their login credentials into the compromised system, StealC steals their data. Once cybercriminals have access to the victim’s account, they can use it for a variety of other illicit activities, such as distributing other malware or setting up banking scams.

Windows XP Is One of the Most Dangerous Operating Systems: This Is How Easy It Can Get Infected With Malware

Cybercriminals Are Using a New Method to Steal Google Passwords: Full-Screen Mode

They use malware that forces kiosk mode in Google Chrome, displaying a fake login screen.

The malware captures users’ credentials when they type them into Google.

A Cyberattack as New as It Is Effective

A Cyberattack as New as It Is Effective

Receive "Xatakaletter", our weekly newsletter