How careful are you and your team when it comes to online security? You are aware of phishing scams, risky downloads, and the importance of not clicking on suspicious links, correct?
However, there is a new type of malware that is even more cunning, aiming to trick you into revealing your Google login credentials.
This malware doesn't have a specific name yet, but it is part of a larger threat known as "Amadey" and has been increasingly active since August.
It puts your computer into a mode called "kiosk mode," typically used on public computers to restrict access to a single window. This enables it to lock your browser in full-screen mode, concealing your usual navigation buttons like the address bar and menus, and redirecting you to a fake Google password reset page.
Usually, you could exit full-screen mode by pressing the Esc or F11 keys, right? Well, not with this malware. It prevents these actions when infecting your PC, aiming to mislead you into thinking that entering your password is the solution.
The fake password reset page will resemble a genuine Google page. However, once you enter your details, they will be captured by another hidden malware, ultimately falling into the hands of cybercriminals.
It's quite alarming.
But here's the positive news: You can escape without compromising your credentials.
If your browser is stuck in full-screen mode, try pressing ALT+TAB to switch tasks, or ALT+F4 to close the window forcibly. Otherwise, attempt to close it through the task manager (CTRL+ALT+DELETE).
If all else fails, simply restart your PC by holding down the power button or unplugging it, then seek assistance from an expert (like us) to address the malware.
Prevention is always the best strategy. Be cautious if your computer starts behaving oddly, especially if your browser suddenly enters full-screen mode and prevents you from navigating away.
Avoid clicking on suspicious links or downloading attachments that you are uncertain about. And no matter how tempting it may be to bypass an irritating screen, never enter your password unless you are absolutely certain that the website is legitimate.
If you would like us to educate your team on how to avoid the latest scams, we are here to assist. Contact us.
Comments