In a bid to offer users better password protection, Google is introducing Chrome version 79 and which comprises a number of improvements, including warning users when their password has been stolen as part of a data leak.
Users can control the new feature in Chrome Settings under Sync and Google Services. It’ll be gradually rolled out for everyone logged into Chrome, Forbes reported on Tuesday.
The tech giant has been warning about reused passwords in a separate browser extension or in its password check up tool, but it is now baking this directly into Chrome to provide warnings as users log in to sites on the web.
Even as Google will be watching as users enter their password, but it will not actually be able to see the login credentials.
It is able to do this using tried and tested encryption techniques that allow it to check one password against a massive trove of stolen credentials without seeing the plain text, the report added.
People from India are among those most affected by Shlayer, the most widespread macOS threat in 2019, after those in the US, says a new report from cybersecurity firm Kaspersky.
A smart malware distribution system, Shlayer spreads via a partner network, entertainment websites and even Wikipedia, demonstrating that even users that only visit legal sites still need additional protection online. Top countries where users have been affected by the threat include the US (31 per cent), India (18.9 per cent), Germany (14 per cent), France (10 per cent) and the UK (10 per cent), according to the report.
“The macOS platform is a good source of revenue for cybercriminals, who are constantly looking for new ways to deceive users, and actively use social engineering techniques to spread their malware. This case demonstrates that such threats can be found even on legitimate sites,” said Anton Ivanov, Kaspersky Security Analyst.
“Luckily for macOS users, the most widespread threats that target macOS currently revolve around feeding illicit advertising rather than something more dangerous, such as stealing financial data,” Ivanov said. The malware specialises in installation of adware – programmes that terrorise users by feeding illicit ads, intercepting and gathering users’ browser queries, and modifying search results to distribute even more advertising messages.
Shlayer’s share among all attacks on macOS devices registered by Kaspersky products in January – November 2019 amounted to almost a third, with nearly all other top 10 macOS threats being the adware that Shlayer installs: AdWare.OSX.Bnodlero, AdWare. OSX.Geonei, AdWare.OSX.Pirrit and AdWare.OSX.Cimpli.
The infection process often consists of two phases – first the user installs Shlayer, then the malware installs a selected type of adware. Device infection, however, starts with an unwitting user downloading the malicious programme.
In order to achieve installations, the threat actor behind Shlayer sets up a malware distribution system with a number of channels leading users to download the malware. Kaspersky said in 2019 it prevented attacks carried out by Shlayer at least once on every 10th device using Kaspersky Solutions for Mac.