Google confirms online ‘spy’ attacks on chrome users by ‘highly sophisticated malware’

Think before you click on these links.

After online security experts discovered an influx of malware infection users, Google has then confirmed the attacks and announced a security piece that will accompany the browser’s latest update.

Researchers at the Kaspersky data protection firm found “a wave of infections from previously unknown and highly sophisticated malware” this month, which was caused when a target clicked on a phishing link in an email and launched the Google Chrome site.

“No further action was required to become infected,” the researchers noted.

According to their report, cyber security researchers “quickly analyzed the code of exploitation, in contrast to its logic, and confirmed that it was based on a weak day’s weakness affecting the latest version of Google Chrome”, immediately reporting it to the technology giant.

“We have discovered and reported dozens of day -to -day uses actively used in attacks, but this special exploitation is certainly one of the most interesting we have encountered,” the researchers admitted.

“Vulnerability Cve-2025-2783 really let us scratch our heads, as, without any malignancy or forbidden, allowed the attackers to bypass the protection of Google Chrome sandbox, as if it did not exist.”

Malware’s main goal seemed to be “espionage”, the team explained, adding that the attack, called “Operation Forumroll”, was aiming for media professionals, educational institutions and government agencies.

While the security of the security will accumulate in the next Chrome update, experts have warned long users to avoid clicking on unknown links and use a critical eye when evaluating email for security before engaging with content.

The news of the vulnerability comes just days after Microsoft called on people to use the company browser’s edge in the middle of a stream of online security attacks.

Last month, Google Chrome users were announced to stop using more than a dozen browser that pose a security threat.

Experts Flag 16 Worst of -purpose “browser supplements – used for blocking advertising, emojis and more – that allowed hackers to slide data or even participate in the search engine fraud.