Malware Could Exploit Google Password Manager to Hijack Passkey-Protected Accounts
Security researchers have discovered attack methods that let malware abuse Google Password Manager to steal passkeys and take over protected accounts. These techniques bypass the intended protections of passkey-based authentication, which is increasingly used as a safer alternative to passwords. The findings highlight a critical weakness in how passkeys are stored and accessed, urging users to stay alert to malware risks.