VaultJacking Attack Exposes Google Password Vaults via Single PIN

Gbhackers •Mayura Kathir • May 28, 2026

A newly disclosed phishing technique dubbed “VaultJacking” is raising serious concerns across the cybersecurity community after researchers demonstrated how a single captured Google Password Manager (GPM) PIN can expose an entire user credential vault. The attack shows that even passkeys widely as phishing-resistant can be indirectly compromised when attackers target the underlying sync infrastructure […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vaultjacking: New Phishing Technique Compromises Google Password Manager A new phishing technique named 'Vaultjacking' has been revealed, allowing attackers to exploit a single captured Google Password Manager (GPM) PIN to access an entire user's credential vault. This method can compromise all third-party credentials saved in Chrome, including passkeys, through a single phishing attack on a targeted site. The technique leverages an AiTM (Adversary in the Middle) landing page to capture the PIN. Security experts are raising alarms about the potential for widespread credential theft, as the attack can indirectly compromise even phishing-resistant passkeys. The full scope of the impact is still being assessed, but the cybersecurity community is urged to take precautions. Current status indicates that awareness is growing, but no specific patches or mitigations have been released yet. 3 sources 65

Extracted Entities

VaultJacking Attack Exposes Google Password Vaults via Single PIN

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)