CERT24New FROST attack lets websites track which sites and apps a user opensLoading data…
CERT24Threat Observatory
Period

New FROST attack lets websites track which sites and apps a user opens

The FROST attack, described by researchers at Graz University of Technology, allows a malicious website to use JavaScript and SSD timing to identify which websites a user visits or which apps the user opens. It requires no native code, browser extension, or permission prompt.

← Back to intelligence

New FROST attack lets websites track which sites and apps a user opens

The FROST attack, described by researchers at Graz University of Technology, allows a malicious website to use JavaScript and SSD timing to identify which websites a user visits or which apps the user opens. It requires no native code, browser extension, or permission prompt.