Researchers Find Antigravity Sandbox-Escape Flaw and Fake Installer Delivering Stealer Malware
Summary
Researchers found a Google Antigravity flaw that could enable sandbox escape and remote code execution; Google patched it in late February. Separately, a fake installer was found delivering scripts for stealer malware.
Key points
- Pillar Security found insufficient input sanitization in a parameter that could allow command injection through a file search operation, sandbox escape, and arbitrary code execution.
- Researchers demonstrated that a malicious script could be triggered through an apparently legitimate search, bypassing Secure Mode; indirect prompt injection via attacker-controlled comments in an untrusted source file could also trigger the exploit without prior account compromise.
- Google patched the vulnerability in late February.
- Malwarebytes found that a Google search could lead to google-antigravity[.]com, a fake site serving a trojanized installer that also installs two PowerShell scripts to deliver an additional payload.
- The stealer targets browser passwords, cookies and autofill data, messaging apps, cryptocurrency wallets, gaming platforms, and FTP clients.
- The malware also includes capabilities for clipboard hijacking, keystroke logging, and creating a hidden Windows desktop that attackers could potentially capture or control.
Article Details
- Event Type
- A security vulnerability in Google Antigravity was reported alongside a malware-delivery campaign using a fake Antigravity website.
- Impact
- The vulnerability could allow sandbox escape and remote code execution through injected commands. Google patched it in late February. Separately, the fake website distributes a trojanized installer that deploys PowerShell scripts to deliver a stealer targeting sensitive data, including browser data, and includes clipboard-hijacking and keystroke-logging capabilities.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | google-antigravity[.]com | Fake Antigravity website that delivers a trojanized installer and enables delivery of a stealer. |
MITRE ATT&CK
T1056.001 · KeyloggingThe malware includes keystroke-logging capabilities.T1059.001 · PowerShellPowerShell scripts are deployed to enable delivery of an additional malware payload.T1115 · Clipboard DataThe malware includes clipboard-hijacking capabilities.T1555.003 · Credentials from Web BrowsersThe stealer targets saved passwords and other data in browsers.