SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk

SquareX warns of an emergent "browser-native ransomware" that leverages browser-based authentication, malicious extensions/OAuth social engineering, and AI-driven automation to access, copy, delete, or lock enterprise cloud data without traditional file downloads—potentially evading EDR/antivirus. Demonstrations show attackers can reset passwords, exfiltrate files from Google Drive/Dropbox/OneDrive, and expand access via shared drives, prompting a recommendation for Browser Detection and Response (BDR) solutions to address client-side identity attacks in the browser.