Certo Warns Cyberstalkers Can Abuse Chrome Sync to View Browsing History and Passwords
Summary
Certo Software reports that cyberstalkers can use brief physical access to sign Chrome into their own Google account and enable sync, potentially exposing a victim’s browsing history and saved passwords. It recommends clearer sync and account alerts.
Key points
- Certo Software says brief physical access to a phone can let a stalker sign Chrome into their own Google account and enable sync.
- The alleged misuse could expose a victim’s browsing history and saved passwords to the account holder on another device.
- Certo illustrated the tactic with a pseudonymous victim, Emma; the article provides no independent confirmation of the case.
- Certo recommends alerts when a new account is added or sync is enabled, plus an indicator showing which account is syncing.
- EFF cybersecurity director Eva Galperin said the finding highlights tech-enabled abuse beyond stalkerware.
- Google did not respond to requests for comment.
Article Details
- Event Type
- Reported cyberstalking through abuse of Google Chrome’s sync feature
- Impact
- After brief physical access to a victim’s phone, a stalker can sign Chrome into an account they control and enable sync, potentially copying the victim’s browsing history and saved passwords for remote access. Certo Software described this method using a pseudonymous victim’s case; Google did not respond to requests for comment.
People
Eva GalperinElectronic Frontier Foundation director of cybersecurity who commented that the research highlights technology-enabled abuse beyond stalkerware.Russell Kent-PayneCerto Software co-founder who described how a stalker could use Chrome sync to copy a victim’s browsing activity to an account they control.