VaultJacking Attack Steals Entire Google Password Manager Vault With One Captured PIN

Cybersecuritynews •Tushar Subhra Dutta • May 28, 2026

A new phishing technique called VaultJacking has emerged, and it is raising serious alarms across the cybersecurity community. With just a single captured 6-digit PIN, an attacker can walk away with an entire Google Password Manager vault, including every saved password and passkey stored inside. This is not a theoretical risk, as it is a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vaultjacking: New Phishing Technique Compromises Google Password Manager A new phishing technique named 'Vaultjacking' has been revealed, allowing attackers to exploit a single captured Google Password Manager (GPM) PIN to access an entire user's credential vault. This method can compromise all third-party credentials saved in Chrome, including passkeys, through a single phishing attack on a targeted site. The technique leverages an AiTM (Adversary in the Middle) landing page to capture the PIN. Security experts are raising alarms about the potential for widespread credential theft, as the attack can indirectly compromise even phishing-resistant passkeys. The full scope of the impact is still being assessed, but the cybersecurity community is urged to take precautions. Current status indicates that awareness is growing, but no specific patches or mitigations have been released yet. 3 sources 65

Extracted Entities

VaultJacking Attack Steals Entire Google Password Manager Vault With One Captured PIN

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)