Malware can silently hijack Chrome’s synced passkeys on Windows

Malware with ordinary user privileges can bypass the protections users expect from Google Password Manager passkeys, including fingerprints, PINs, and visible prompts. Unit 42 identified three attack paths against Chrome’s Google Cloud Authenticator that can produce valid login assertions or extract synced passkey keys without breaking passkey cryptography.
Source

👉@sysadminoff

https://4sysops.com/archives/malware-can-silently-hijack-chromes-synced-passkeys-on-windows/