3 ms·
My bet would be on malware or compromised browser extension. You probably typed (or copy/pasted) the password ans something kept a copy along the way.
by Raed667 5y ago
My bet would be on malware or compromised browser extension. You probably typed (or copy/pasted) the password ans something kept a copy along the way.
- gregsadetsky 5y agoCompromised browser extension could make sense, aye. Do Chrome extensions have access to the file system too? Is there a chance my local KeePassX file has been siphoned off? Thanks
- Raed667 5y agoI don't think that's possible, more likely an extension that has access to the login form of lastpass
- gregsadetsky 5y agoGot it, thanks. And yes, you're right, after checking, Chrome extensions don't have access to local files by default. I checked all of the extensions I have (after disabling them all) and none had "file access" enabled.
- tyingq 5y agoClipboard access might be possibility.
- halpert 5y agoChrome extensions can run native binaries, so yes.
- aNopBxEjtX 5y agothey can't
- halpert 5y agoThey can. Look up native messaging ports.
- aNopBxEjtX 5y agothat doesn't let you launch processes, it lets you interact with running ones. even if the chrome extensions could launch new processes, they run inside Untrusted integrity level on Windows, you can verify this at chrome:sandbox and checking the Chrome task manager (shift+esc). You cannot interact with processes above your own integrity level nor launch processes with an integrity level higher than your current.