Google Chrome users are vulnerable to sensitive data theft

Security experts at Identity Finder demonstrated that Google Chrome users are vulnerable to sensitive Data Theft because the browser stores it unencrypted.

Google Chrome is today the most diffused web browser, nearly 39% of internet users have chosen it according the data proposed by Stat Counter. The reason of the success behind Google Chrome is its efficiency and simplicity of use, but what can we say about the security? How Google Chrome manage and protect users’ data?

Security experts at Identity Finder published an interesting blog post to highlight a series of security flaws in Google Chrome that could allow an attacker to steal personal data archived in the history files.

Experts at Identity Finder demonstrated different methods to access personal data from the History Provider Cache in Google Chrome using their Sensitive Data Manager application, even if those data has been submitted through a secure website.

Identity Finder has notified Google of the risk related to the exploit of the flaw, but have not yet received responses. Waiting for Google reply the experts provided the following suggestions:

“Anytime you enter a credit card number or other PII into a form, be sure to “Clear saved Autofill form data”, “Empty the cache”, and “Clear browsing history” from the past hour and the information you typed will be erased. Alternatively, disabling Autofill or using Incognito mode will protect form data.”

Identity Finder security experts have provided the following Infograph to sensibilize Google Chrome users on the risks of exposure for their data.