{"id":233193,"date":"2026-08-07T05:00:05","date_gmt":"2026-08-07T12:00:05","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=233193"},"modified":"2026-08-06T12:10:00","modified_gmt":"2026-08-06T19:10:00","slug":"can-malware-bypass-passkeys-this-week-in-scams","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/","title":{"rendered":"Can Malware Bypass Your Passkeys? This Week in Scams"},"content":{"rendered":"<p><span data-contrast=\"auto\">This week in\u00a0scams\u00a0and cybersecurity news,<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Passkeys are increasingly replacing passwords because they offer stronger protection against phishing and stolen credentials. But new research shows that\u00a0<\/span><b><span data-contrast=\"auto\">malware already running on a device could potentially interfere with certain synced passkeys and hijack protected accounts.<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">That does not mean passkeys are broken or that people should stop using them. Instead, the research highlights an important distinction:\u00a0<\/span><b><span data-contrast=\"auto\">strong account security still depends on the security of the device holding your credentials.<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Here\u2019s\u00a0what researchers found, whether passkeys\u00a0remain\u00a0safe, and how to protect your accounts.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">Can Malware Bypass Your Passkeys?<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Researchers at Palo Alto Networks recently\u00a0demonstrated\u00a0several attack methods targeting\u00a0<\/span><b><span data-contrast=\"auto\">Google-synced passkeys used through Chrome on Windows devices<\/span><\/b><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">According to\u00a0SecurityWeek, these techniques could allow malware already installed on a computer to impersonate a trusted device or obtain authentication information needed to access certain passkey-protected accounts.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<h3 aria-level=\"3\"><span data-contrast=\"none\">Key takeaways<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h3>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\"> The device must already be infected.<\/span><\/b><span data-contrast=\"auto\">\u00a0An attacker cannot steal your passkey simply by sending you a phishing text or email.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\"> The research focused on synced passkeys.<\/span><\/b><span data-contrast=\"auto\">\u00a0These credentials are encrypted and synchronized across compatible devices through a cloud account.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\"> Malware may be able to impersonate a trusted device.<\/span><\/b><span data-contrast=\"auto\">\u00a0Researchers\u00a0demonstrated\u00a0methods that could request valid authentication without producing the biometric or device-unlock prompt a user would normally expect.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\"> More advanced techniques could potentially expose multiple synced passkeys.<\/span><\/b><span data-contrast=\"auto\">\u00a0One method targeted sensitive information that briefly appears in browser memory during device\u00a0enrollment.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\"> Google was notified and has\u00a0reportedly introduced\u00a0mitigations.<\/span><\/b><span data-contrast=\"auto\">\u00a0The findings came from controlled security research, not evidence of a widespread criminal campaign.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><a href=\"https:\/\/www.securityweek.com\/new-attack-methods-enable-malware-to-hijack-passkey-protected-accounts\/\" target=\"_blank\" rel=\"noopener\"><i><span data-contrast=\"none\">(SecurityWeek)<\/span><\/i><\/a><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">Are Passkeys Still Safe?<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h2>\n<p><b><span data-contrast=\"auto\">Yes. Passkeys\u00a0remain\u00a0more resistant to phishing than traditional passwords.<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Passkeys are tied to the legitimate website or app they were created for, so a fake login page\u00a0generally cannot\u00a0trick you into typing or handing over the credential. They also\u00a0eliminate\u00a0the risks created by weak and reused passwords.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">This research points to a different threat:\u00a0<\/span><b><span data-contrast=\"auto\">malware already\u00a0operating\u00a0on your device may try to abuse the systems that store, synchronize, or approve your credentials.<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Think of it this way:\u00a0<\/span><b><span data-contrast=\"auto\">a stronger lock still matters, but it cannot fully protect you if an intruder is already inside the house.<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">This Week\u2019s Safety Tips<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h2>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"auto\">\u2713 <\/span><b><span data-contrast=\"auto\">Use passkeys when available.<\/span><\/b><span data-contrast=\"auto\">\u00a0They still provide stronger protection against phishing and password reuse than traditional passwords.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"auto\">\u2713\u00a0<\/span><b><span data-contrast=\"auto\">Keep your browser, operating system, and security software updated.<\/span><\/b><span data-contrast=\"auto\">\u00a0Updates help close vulnerabilities that malware could exploit.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"auto\">\u2713\u00a0<\/span><b><span data-contrast=\"auto\">Be cautious with unexpected files and downloads.<\/span><\/b><span data-contrast=\"auto\">\u00a0Fake updates, email attachments, and malicious links are common ways malware reaches a device.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"auto\">\u2713\u00a0<\/span><b><span data-contrast=\"auto\">Review your trusted devices and active sessions.<\/span><\/b><span data-contrast=\"auto\">\u00a0Remove devices you no longer recognize or use.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">How McAfee Helps Protect Your Devices and Accounts<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h2>\n<p style=\"padding-left: 40px;\"><a href=\"https:\/\/www.mcafee.com\/en-us\/antivirus.html\"><b><span data-contrast=\"auto\">Device\u00a0security<\/span><\/b><\/a><span data-contrast=\"auto\">\u00a0helps detect and block viruses, malware, and other threats that could compromise the device where your passkeys and passwords are stored.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><a href=\"https:\/\/www.mcafee.com\/en-us\/antivirus.html\"><b><span data-contrast=\"auto\">Web\u00a0protection<\/span><\/b><\/a><span data-contrast=\"auto\">\u00a0helps stop risky websites and malicious downloads before they can install harmful software or steal information.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><a href=\"https:\/\/www.mcafee.com\/en-us\/scam-detector\/\"><b><span data-contrast=\"auto\">Scam Detector<\/span><\/b><\/a><span data-contrast=\"auto\">\u00a0identifies\u00a0suspicious texts, emails, and links that may try to lure you into downloading malware or visiting a fraudulent website.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><a href=\"https:\/\/www.mcafee.com\/learn\/identity-monitoring\/\"><b><span data-contrast=\"auto\">Identity Monitoring<\/span><\/b><\/a><span data-contrast=\"auto\">\u00a0alerts you if personal information connected to your accounts appears in known data breaches or on the dark web, helping you respond before it can be used for fraud.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">Other Scam and Security News This Week<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h2>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\">Meta AI model\u00a0reportedly accessed\u00a0another company\u2019s systems during testing.<\/span><\/b><span data-contrast=\"auto\">\u00a0Meta confirmed that its Muse Spark model exploited a vulnerability after a testing configuration mistakenly gave it access to the internet. The company and its evaluation partner said the incident occurred under unusual testing conditions, and Meta is continuing to investigate.\u00a0<\/span><a href=\"https:\/\/edition.cnn.com\/2026\/08\/05\/tech\/meta-ai-hacking?\" target=\"_blank\" rel=\"noopener\"><i><span data-contrast=\"none\">(CNN)<\/span><\/i><\/a><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\">AI-powered voice phishing\u00a0reportedly targets\u00a0major financial firms.<\/span><\/b><span data-contrast=\"auto\">\u00a0Hedge funds and private equity companies were\u00a0reportedly targeted\u00a0with \u201cvishing\u201d attacks that used AI-generated voices to impersonate real people and attempt to bypass security processes. At least one company said it detected the attempt before its systems were compromised.\u00a0<\/span><a href=\"https:\/\/gizmodo.com\/ai-powered-vishing-attacks-reportedly-targeted-top-hedge-funds-2000794923?\" target=\"_blank\" rel=\"noopener\"><i><span data-contrast=\"none\">(Bloomberg\/Gizmodo)<\/span><\/i><\/a><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p style=\"padding-left: 40px;\"><b><span data-contrast=\"auto\">ChainDrop\u00a0malware\u00a0reportedly infects\u00a0more than 1,300 software packages.<\/span><\/b><span data-contrast=\"auto\">\u00a0Researchers say the self-spreading attack compromised packages distributed through the\u00a0npm\u00a0software registry and\u00a0attempted\u00a0to steal developer, cloud, and application credentials. Organizations that installed affected versions have been\u00a0advised to rotate\u00a0exposed credentials and inspect their systems for unauthorized activity.\u00a0<\/span><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages\/\" target=\"_blank\" rel=\"noopener\"><i><span data-contrast=\"none\">(BleepingComputer)<\/span><\/i><\/a><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559685&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">And\u00a0we\u2019ll\u00a0be back next week with more\u00a0scam\u00a0alerts and cybersecurity news.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This week in\u00a0scams\u00a0and cybersecurity news,\u00a0 Passkeys are increasingly replacing passwords because they offer stronger protection against phishing and stolen credentials&#8230;.<\/p>\n","protected":false},"author":1440,"featured_media":197883,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[10667,10661,13,1838,12],"tags":[],"coauthors":[16632],"class_list":["post-233193","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-news","category-internet-security","category-privacy-identity-protection","category-mobile-security","category-family-safety"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Can Malware Bypass Your Passkeys? This Week in Scams | McAfee Blog<\/title>\n<meta name=\"description\" content=\"Researchers demonstrated how malware already installed on a device could hijack certain passkey-protected accounts. Learn whether passkeys are still safe and how to better protect your devices and logins.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Can Malware Bypass Your Passkeys? This Week in Scams | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"Researchers demonstrated how malware already installed on a device could hijack certain passkey-protected accounts. Learn whether passkeys are still safe and how to better protect your devices and logins.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-07T12:00:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Brooke Seipel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@McAfee\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brooke Seipel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/\"},\"author\":{\"name\":\"Brooke Seipel\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729\"},\"headline\":\"Can Malware Bypass Your Passkeys? This Week in Scams\",\"datePublished\":\"2026-08-07T12:00:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/\"},\"wordCount\":727,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png\",\"articleSection\":[\"Security News\",\"Internet Security\",\"Privacy &amp; Identity Protection\",\"Mobile Security\",\"Family Safety\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/\",\"name\":\"Can Malware Bypass Your Passkeys? This Week in Scams | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png\",\"datePublished\":\"2026-08-07T12:00:05+00:00\",\"description\":\"Researchers demonstrated how malware already installed on a device could hijack certain passkey-protected accounts. Learn whether passkeys are still safe and how to better protect your devices and logins.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png\",\"width\":300,\"height\":200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security News\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/security-news\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Can Malware Bypass Your Passkeys? This Week in Scams\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729\",\"name\":\"Brooke Seipel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/ac03c1083bbdcd2cbb0675dc29c62cbe\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg\",\"caption\":\"Brooke Seipel\"},\"description\":\"Brooke Seipel is the Content Editor in Chief at McAfee, where she leads the company's content strategy with a focus on cybersecurity education. With a decade of experience in audience development and digital content, Brooke has a strong understanding of online audiences, emerging trends, and the evolving cyber landscape. Before joining McAfee, Brooke led audience teams and served as both a reporter and editor at numerous award-winning publications including Fortune, The Hill, International Business Times, New Republic, and The OC Register. Brooke is dedicated to providing insightful, actionable content that empowers readers to make informed decisions about their digital safety. When she's not immersed in the world of cybersecurity, you can find her scrolling social media endlessly, soaking up the latest trends, and also volunteering as a naturalist.\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/brooke-seipel\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Can Malware Bypass Your Passkeys? This Week in Scams | McAfee Blog","description":"Researchers demonstrated how malware already installed on a device could hijack certain passkey-protected accounts. Learn whether passkeys are still safe and how to better protect your devices and logins.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Can Malware Bypass Your Passkeys? This Week in Scams | McAfee Blog","og_description":"Researchers demonstrated how malware already installed on a device could hijack certain passkey-protected accounts. Learn whether passkeys are still safe and how to better protect your devices and logins.","og_url":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2026-08-07T12:00:05+00:00","og_image":[{"width":300,"height":200,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png","type":"image\/png"}],"author":"Brooke Seipel","twitter_card":"summary_large_image","twitter_creator":"@McAfee","twitter_site":"@McAfee","twitter_misc":{"Written by":"Brooke Seipel","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/"},"author":{"name":"Brooke Seipel","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729"},"headline":"Can Malware Bypass Your Passkeys? This Week in Scams","datePublished":"2026-08-07T12:00:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/"},"wordCount":727,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png","articleSection":["Security News","Internet Security","Privacy &amp; Identity Protection","Mobile Security","Family Safety"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/","url":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/","name":"Can Malware Bypass Your Passkeys? This Week in Scams | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png","datePublished":"2026-08-07T12:00:05+00:00","description":"Researchers demonstrated how malware already installed on a device could hijack certain passkey-protected accounts. Learn whether passkeys are still safe and how to better protect your devices and logins.","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#primaryimage","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2013\/04\/300x200_Blog_072924.png","width":300,"height":200},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/security-news\/can-malware-bypass-passkeys-this-week-in-scams\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Security News","item":"https:\/\/www.mcafee.com\/blogs\/security-news\/"},{"@type":"ListItem","position":3,"name":"Can Malware Bypass Your Passkeys? This Week in Scams"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729","name":"Brooke Seipel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/ac03c1083bbdcd2cbb0675dc29c62cbe","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg","caption":"Brooke Seipel"},"description":"Brooke Seipel is the Content Editor in Chief at McAfee, where she leads the company's content strategy with a focus on cybersecurity education. With a decade of experience in audience development and digital content, Brooke has a strong understanding of online audiences, emerging trends, and the evolving cyber landscape. Before joining McAfee, Brooke led audience teams and served as both a reporter and editor at numerous award-winning publications including Fortune, The Hill, International Business Times, New Republic, and The OC Register. Brooke is dedicated to providing insightful, actionable content that empowers readers to make informed decisions about their digital safety. When she's not immersed in the world of cybersecurity, you can find her scrolling social media endlessly, soaking up the latest trends, and also volunteering as a naturalist.","url":"https:\/\/www.mcafee.com\/blogs\/author\/brooke-seipel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/233193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/1440"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=233193"}],"version-history":[{"count":2,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/233193\/revisions"}],"predecessor-version":[{"id":233195,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/233193\/revisions\/233195"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media\/197883"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=233193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=233193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=233193"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=233193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}