sophos mobile
Threat Intelligence Executive Report – Volume 2025, Number 4
20 August 2025
default
TR-25-0201 (Pik Online Yazılım Çözümleri A.Ş. – Pik Online Yazılımı Güvenlik Bildirimi)
20 August 2025

Resources

DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

Popular password manager plugins for web browsers have been found susceptible to clickjacking security vulnerabilities that could be exploited to steal account credentials, two-factor authentication (2FA) codes, and credit card details under certain conditions.
The technique has been dubbed Document Object Model (DOM)-based extension clickjacking by independent security researcher Marek Tóth,

Related resources