Sneaky malware can steal passwords and spy on what people do online
Researchers found a harmful program called JSCeal that can steal sign-in information, monitor activity, and hijack active logins by taking browser session data. This means attackers may be able to access accounts even if extra sign-in verification is turned on.
Who is at risk
Anyone who signs in to online accounts through a web browser is at risk, especially people who stay logged in to email, work, banking, or social platforms.
What to watch for
Watch for account logins you do not recognize, unexpected sign-out events, strange browser behavior, or messages that settings or security details were changed without your approval.
What to do
Sign out of important accounts on all devices, clear your browser cookies, update your browser and computer, run a trusted security scan, and change passwords for sensitive accounts from a clean device.