A new cyberattack technique called 'Commetjacking' has been discovered targeting the Comet browser, a popular email client. This attack manipulates the browser to steal users' email data without their knowledge. The Commetjacking attack exploits vulnerabilities in the Comet browser's handling of web content, allowing attackers to inject malicious scripts that exfiltrate sensitive email information. This method poses a significant threat to email security and user privacy, as it bypasses traditional security measures and operates stealthily. Users of the Comet browser are advised to update to the latest version and apply recommended security patches to mitigate this risk. Additionally, cybersecurity professionals should monitor for indicators of compromise related to Commetjacking and educate users about safe browsing practices. This emerging threat highlights the importance of continuous security assessments for email clients and the need for robust defenses against browser-based attacks.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Fri, 03 Oct 2025 14:05:12 +0000