Passkey Sync Bypass: Malware Techniques Target Google Account Logins
Source headline: New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts
Intelligence Summary
Palo Alto Networks researchers detailed how malware can target Google accounts protected by synced passkeys. The work focuses on weaknesses in the way passkeys are generated, synchronized, or validated during account access. If exploited, the techniques could allow account takeover even when users rely on passkeys for authentication. This raises concerns about the threat model for passkey-based login flows and device sync assumptions. Users should review Google security settings, keep devices and browsers updated, and remain alert to suspicious login activity. Security teams should assess passkey deployment and monitor for anomalous authentication events.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.