Browser add-on vulnerability - potential clickjacking

Hi Everybody,

At this year’s DEFCON 33, Marek Toth demonstrated how browser add-ons for various password managers can be manipulated to intercept passwords and TOTPs.
Since the list actually includes many different manufacturers, I wonder whether Netwrix is also affected?
He examined the following password manager manufacturers because they appeared in a list published by -uk.PCMag.com- entitled “The Best Password Managers for 2025.”

I read an article about this on Heise-Online (a German tech news site).

https://www.heise.de/news/Passwort-Manager-Browser-Erweiterungen-koennen-Datenklau-ermoeglichen-10569024.html

Translated with DeepL.com- (free version)

4 Likes