Security researchers find stalkers abusing Chrome’s sync feature

Researchers at Certo reported that abusers are exploiting Google Chrome’s sync feature to spy on victims: an attacker with brief, unattended access to a phone can sign Chrome into their own Google account and, if sync is enabled, receive the victim’s browsing history and saved passwords. The technique requires no malicious app installation and leverages legitimate functionality, prompting calls for Google to add notifications or clearer indicators when sync is active to better protect users from tech-enabled stalking.