Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Four outlets report a new attack vector for Google Password Manager that bypasses passkey protections.
Evidence dossier
Intelligence passport
Measured timeline
- Detected The first matching coverage entered the Archynetys cluster.
- Peak measured velocity The recorded velocity reached 10.
- Evidence threshold reached The story had enough independent coverage for an explanatory brief.
- Latest coverage observed Most recent article currently attached to this story cluster.
Source diversity sample: Digital Trends · CyberSecurityNews · PiunikaWeb · BleepingComputer · LinkedIn · Unit 42 · The Hacker News.
How this dossier is built: methodology · AI policy · corrections.
Momentum
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
Where it stands
Four outlets today reported a new attack vector for Google Password Manager. The exploit allows malware to hijack passkey-protected accounts without requiring a password or fingerprint. According to LinkedIn and The Hacker News, the attack targets the synced passkeys stored in Google Password Manager.
Unit 42 and CyberSecurityNews describe the attack as a novel method to bypass passwordless authentication systems. The attack works by exploiting the way Google Password Manager syncs passkeys across devices. Malware can intercept these synced passkeys, allowing unauthorized access to accounts.
Google has not yet publicly responded to these reports. The security community is closely monitoring the situation.
Synthesized by Archynetys from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 14h ago.
Who reported it (8)
- Passkeys were pushed as a safer future. Hackers have figured out ways to break those synced to Google Digital Trends · 18h ago
- Malware Can Steal Your Google Synced Passkey Without Asking for Your Password or Fingerprint CyberSecurityNews · 18h ago
- Your Google passkeys all share one secret, and hackers just learned to steal it PiunikaWeb · 18h ago
- New Pass-ta-key attacks let malware hijack Google-synced passkeys BleepingComputer · 18h ago
- Google Password Manager Exploit Enables Malware To Hijack Passkey-Protected Accounts LinkedIn · 18h ago
- Malware Can Steal Your Google Synced Passkey Without Asking for Your Password or Fingerprint CyberSecurityNews · 18h ago
- Pass the Passkey: A Novel Attack Surface in Passwordless Authentication Unit 42 · 18h ago
- Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts The Hacker News · 18h ago
Answered
What is a passkey?
A passkey is a type of passwordless authentication method that uses cryptographic keys instead of traditional passwords.
How does this attack work?
The attack exploits the synchronization feature of Google Password Manager to intercept passkeys, allowing malware to gain access to protected accounts.
Has Google responded to these reports?
As of the latest reports, Google has not publicly addressed the exploit.
Topics
From around our network
Related trends
Visa beefs up cybersecurity offerings with $2.4 billion BioCatch deal
Visa is spending $2.4 billion to acquire BioCatch, a firm that uses AI to detect fraud.
Google Chrome may soon block New Tab hijacker extensions by default
Google is preparing a security update for the Chrome browser to automatically block extensions that hijack user search engines and New Tab pages.
Coldcard wallet attack drains up to $89M in Bitcoin from 1,200+ addresses
Hackers have exploited a flaw in Coldcard wallets to steal Bitcoin worth up to $89M from over 1,200 addresses.
Hotel Wi-Fi phishing attack targets Microsoft logins
Travelers face increased cybersecurity risks as reports link Russian-affiliated hackers to widespread malware distribution via public hotel Wi-Fi networks.
Apple struggles to keep pace with AI ‘bug’ hunters
Apple faces a deluge of AI-generated bug reports, overwhelming its security teams and potentially missing real threats.
The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier
AI hacking incidents have sparked a debate on legal responsibility and cybersecurity measures.
Open prediction lab
Can you beat the machine?
Pick tomorrow's top trend, then compare your result with Archynetys's self-graded forecast.
📬 The daily trend digest
The world's top trends, once a day. No spam, one-click unsubscribe.