Dossier
Pass-ta-key
Coverage of Pass-ta-key in the Nexus archive.
- Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Malware on a Windows machine can bypass security measures to access passkey-protected accounts via vulnerabilities in Chrome's Google Password Manager. Unit 42 identified three attack methods, Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key, targeting the password manager's cloud authenticator.