Beware: New Malware Aims to Frustrate You into Giving Away Your Login Details

Posted November 5, 2024

How secure are you and your team when it comes to online safety? You’re likely aware of phishing scams and suspicious downloads, but there’s a new type of malware designed to trip you up in a different way.

 

This malware, connected to a broader threat called “Amadey” that’s been increasingly active since August, takes a unique approach: it aims to frustrate you into surrendering your Google login details.

 

Here’s how it works: this malware locks your PC into “kiosk mode” – a setting that only allows access to a single window, typically used on public computers. It forces your browser into full-screen, hiding essential navigation elements like the address bar and menus. Once it’s got your attention, you’re redirected to a realistic, yet fake, Google password reset page.

 

Under normal circumstances, you’d just press Esc or F11 to exit full-screen mode. However, this malware won’t let you do that, causing you to think that entering your password is the only way to resolve the issue.

 

It’s convincing – the password page looks authentic. But the moment you input your details, a secondary malware lurking in the background captures them, delivering your login straight to cyber criminals.

 

How to Protect Yourself

If you find your browser locked in full-screen mode, don’t panic. Try these steps:

  • Press ALT+TAB to switch between open windows or ALT+F4 to close the current one.
  • Use Task Manager (CTRL+ALT+DELETE) to shut down your browser.

If all else fails, a quick restart by holding down the power button or unplugging can resolve the issue, and then seek professional assistance to check your system.

 

Stay Vigilant

Unusual behaviour, like a browser forcing itself into full-screen mode, should always be a red flag. Avoid clicking on unverified links or downloading attachments from unknown sources. And remember, never input your password unless you’re completely certain the site is legitimate.

Our team is here to help keep you secure and informed.

 

If you’d like training for your team to stay ahead of these evolving threats, get in touch—we’re here to help.