

How to deal with passwords saved in your web browser If your desktop web browser automatically fills in form fields with saved passwords - and several do by default - then websites can read those auto-filled passwords without having to do anything devious to your machine. You don't even need to have malware or a malicious browser extension running to have your passwords stolen.

Free software to extract passwords from Windows browsers has been around for at least a decade. Hacks exist for Apple's Keychain password manager, which is used by Apple's Safari browser if you log into Keychain across multiple Macs.īecause Chromium-based browsers such as Chrome, Edge, Brave and Opera share the same underpinnings, you can download and run free software to get information from them on macOS, Windows or Linux. Cross-platform malware called XLoader steals passwords from Macs and PCs alike. RedLine runs on Windows, but Mac browsers aren't immune to password stealers. Like earlier versions of RedLine, this strain is likely being distributed via email. Most recently, RedLine has been spotted posing as a bogus Windows program that tracks the spread of the Omicron variant of the COVID-19 virus. "A recent update to RedLine Stealer also added the ability to steal cryptocurrency cold wallets." "It also collects information about the user and their system such as the username, their location, hardware configuration, and installed security software," the report added. As security firm Proofpoint observed in its initial writeup of RedLine in March 2020, the malware "steals information from browsers such as login, autocomplete, passwords, and credit cards."
