…you might just give the threat actors your Google credentials.
A malware campaign, detected by OALABS researchers, locks your web browser into “kiosk mode” and asks you for your Google credentials to unlock it. Of course, the malware then steals those credentials.
Malware locks browser in kiosk mode to steal Google credentials (bleepingcomputer.com)
“Kiosk mode” has its real world uses in, yes kiosks, where anyone can run locked in demos and promotions on a computer. Normally the Esc or F11 key will get you out of this locked mode, but the malware disables this function, leaving your Google credentials as the only way back into your computer.
The success of this attack is the way it appears just to be a software malfunction or glitch, making it even more likely that the user will get drawn into the attack.
Social engineering at work.
Phishing Primer – Social Engineering (pt. 1) | Smart Thinking Solutions
Phishing Primer – Social Engineering (pt. 2) – CyberAwake
Clive Catton MSc (Cyber Security) – by-line and other articles
