Skip to content
The Nexus
DossierENTITY

Pass-ta-key

Coverage of Pass-ta-key in the Nexus archive.

Earliest in view: Aug 3 · 16:24 UTCMost recent: Aug 5 · 11:11 UTC
Co-mentioned in this coverage
Silver Pass-ta-keytopic2Golden Pass-ta-keytopic2Googleorganization1Google Password Managerorganization1passkeystopic1malwaretopic1Public-Key Cryptographytopic1Unit 42organization1Google Password Managertopic1Chrometopic1
Recent coverage
  • SECURITYAug 5 · 11:11 UTCMALWAREBYTES LABS
    Google’s synchronized passkeys can be stolen in ‘Pass‑ta‑key’ attacks

    Researchers discovered malware can steal Google synchronized passkeys through Google Password Manager, exploiting vulnerabilities in the software despite passkeys being based on public-key cryptography. The 'Pass-ta-key' attacks include scenarios where malware creates unauthorized logins, re-enrolls devices, or decrypts passkeys using a master encryption key.

  • SECURITYAug 3 · 16:24 UTCTHE HACKER NEWS
    Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

    Malware on a Windows machine can bypass security measures to access passkey-protected accounts via vulnerabilities in Chrome's Google Password Manager. Unit 42 identified three attack methods, Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key, targeting the password manager's cloud authenticator.