Google Chrome account security threats

In July 2026 a security firm reported that attackers could exploit Google Chrome’s sync feature to silently monitor a victim’s browsing activity. By adding their own account to a compromised device or Google account, they could capture history, searches, bookmarks, autofill data and open tabs without the user’s knowledge, enabling prolonged cyberstalking and targeted espionage.

By early August 2026 researchers observed a surge in session‑cookie hijacking that allowed attackers to bypass passwords and two‑factor authentication for Google and Microsoft accounts. Nearly 94 billion stolen browser cookies were found on underground markets, with about 20 % still active. Malware families such as RedLine, Vidar and LummaC2 harvest these cookies, and Chrome’s default “sync everything” setting further amplifies the risk by aggregating passwords, payment data and browsing history under a single Google account. Security advice across both reports emphasizes strong passwords, two‑factor authentication, reviewing connected devices, customizing or disabling Chrome sync for sensitive data, and using password managers or passkeys for stronger protection.