Vaultjacking: New Phishing Technique Compromises Google Password Manager

A new phishing technique named 'Vaultjacking' has been revealed, allowing attackers to exploit a single captured Google Password Manager (GPM) PIN to access an entire user's credential vault. This method can compromise all third-party credentials saved in Chrome, including passkeys, through a single phishing attack on a targeted site. The technique leverages an AiTM (Adversary in the Middle) landing page to capture the PIN. Security experts are raising alarms about the potential for widespread credential theft, as the attack can indirectly compromise even phishing-resistant passkeys. The full scope of the impact is still being assessed, but the cybersecurity community is urged to take precautions. Current status indicates that awareness is growing, but no specific patches or mitigations have been released yet.

Key Points: • Vaultjacking allows access to all saved credentials with a single captured PIN. • The attack exploits the Google Password Manager's sync infrastructure. • Phishing-resistant passkeys can be compromised indirectly through this method.