HighAPT
XWorm Malware Can Spy Through Your Microphone and Hijack Logged-In Browser Sessions
Cyber Security News·Source published ·1 min read
What happened?
XWorm malware is moving beyond password theft, giving attackers tools to listen through infected computers, track their location, and control browsers where users are already logged in. Its growing plugin collection turns a compromised Windows device into both a spying tool and a route into online accounts, without requiring attackers to steal passwords first. The browser feature is especially concerning because it uses sessions that have already passed login checks. Instead of signing in from another computer, an attacker operates the victim’s browser directly.
Key details
- HBrowser plugin lets attackers operate victim's browser with active sessions.
- Maps plugin changes registry to allow location access without prompts.
- XWorm detected 1,236 times across 100+ organizations in Q3 2026.
- Financial services 35% of affected customers in India, Brazil, Italy, Panama, US.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.