New Delhi: Gone are the days when you have to physically visit the place to look for information about something and the place. Now every piece of information is available on Google. Along with growing adoption, the risk for data threats is also increasing. As we know, billions of users around the world use the well-known Google Chrome web browser. Imperva Red, a cybersecurity firm, has discovered a vulnerability in Google Chrome and Chromium-based browsers, putting the data of more than 2.5 billion users at risk.
According to the company, a vulnerability known as CVE-2022-3656 allows the theft of private information such as cloud provider logins and crypto wallets. The vulnerability was found during an assessment of the browser’s interaction with the file system, which looked primarily for widespread bugs related to how browsers handle symlinks, the blog said. (Also Read: BAD NEWS for Loan Borrowers! SBI Raises Loan Rates Up To 10bps– See New Rates Here)
A symbolic link, according to Imperva Red, is a kind of file that points to another file or folder. The linked file or directory can then be treated by the operating system as if it were present where the symbolic link resides. It claims that a symbolic link can be useful for creating shortcuts, changing file paths, or more flexible file organization. (Read also: Tips and Tricks: Follow THESE 5 Techniques to SAVE Income Tax)
If not managed properly, these links can also be used to expose vulnerabilities.
The company explains how the flaw hit Google Chrome, saying a hacker could create a bogus website promoting a new crypto wallet service. By asking them to download their “recovery” keys, the website can trick the user into creating a new wallet.
Source link
