# Google Chrome account security threats > Live situation record from CLSTR: https://clstr.news/situations/google-chrome-account-security-threats > Updated: 2026-08-03T11:08:22.000Z. Sources: 2. Developments: 2. In July 2026 a security firm reported that attackers could exploit Google Chrome’s sync feature to silently monitor a victim’s browsing activity. By adding their own account to a compromised device or Google account, they could capture history, searches, bookmarks, autofill data and open tabs without the user’s knowledge, enabling prolonged cyberstalking and targeted espionage. By early August 2026 researchers observed a surge in session‑cookie hijacking that allowed attackers to bypass passwords and two‑factor authentication for Google and Microsoft accounts. Nearly 94 billion stolen browser cookies were found on underground markets, with about 20 % still active. Malware families such as RedLine, Vidar and LummaC2 harvest these cookies, and Chrome’s default “sync everything” setting further amplifies the risk by aggregating passwords, payment data and browsing history under a single Google account. Security advice across both reports emphasizes strong passwords, two‑factor authentication, reviewing connected devices, customizing or disabling Chrome sync for sensitive data, and using password managers or passkeys for stronger protection. ## Timeline ### 2026-08-03: Session cookie hijacking endangers Google accounts worldwide Session‑cookie hijacking, fueled by billions of stolen cookies and malware, threatens Google and Microsoft accounts; users should customize Chrome sync to limit exposure. 2 sources. https://clstr.news/cluster/session-cookie-hijacking-endangers-google-accounts-worldwide ### 2026-07-16: Chrome Sync Exploited for Silent Surveillance, Security Firm Finds Security firm Certo warns that attackers can misuse Chrome Sync to silently track browsing data, enabling covert surveillance and cyberstalking. 2 sources. https://clstr.news/cluster/chrome-sync-exploited-for-silent-surveillance-security-firm-finds --- Cite as: Google Chrome account security threats. CLSTR, https://clstr.news/situations/google-chrome-account-security-threats