Get the latest tech news
New 'browser syncjacking' cyberattack lets hackers take over your computer via Chrome
This attack is truly diabolical. Here's how it works.
Meanwhile, secretly in the background, the Chrome extension connects itself to a managed Google Workspace profile that the attacker has set up in advance. When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing history, and autofill information, to the hacker's managed profile. However, the Zoom download that's provided is actually an executable file that installs a Chrome browser enrollment token from the hacker's Google Workspace.
Or read this on r/technology