Download my Ultimate Guide to Ransomware NOW!
From the Desk of Black Bear MSSP
When it comes to online security, you and your team likely know the basics: avoid phishing scams, steer clear of suspicious downloads, and don’t click on unknown links. But a new type of malware takes a sneakier approach, aiming to frustrate you into handing over your Google login details.
This malware, part of a larger threat family called Amadey, has been on the rise since August and uses a trick called "kiosk mode." Typically, kiosk mode restricts a computer to only one window, often in full-screen mode—a feature usually intended for public-use devices. In this case, the malware locks your browser in full screen, hiding navigation buttons, the address bar, and menus. Then, it redirects you to a fake Google password reset page.
At first glance, you’d likely try pressing Esc or F11 to exit full screen. But once infected, these keys won’t work. The malware is designed to make you think that entering your login details is the only way out, tricking you into typing your password on a bogus page.
Once you enter your credentials, a second malware component running in the background captures and sends them straight to cybercriminals. It’s a clever but unnerving tactic.
If you find your browser stuck in full screen and suspect malware, here’s what you can do to escape:
If these steps don’t work, restart your computer by holding the power button. Then, have an expert assess and remove the malware.
The best defense against malware is to stay vigilant. Be cautious if your computer starts behaving oddly, especially if your browser unexpectedly enters full-screen mode without a clear reason. Avoid clicking on unfamiliar links or downloading attachments from unknown sources. Most importantly, never enter login credentials unless you’re absolutely certain of the site’s legitimacy.
If you’d like a professional team to help your organization stay ahead of these evolving threats, get in touch. We can train your staff on the latest scams and security practices to keep your data safe.