FlagThis

Palo Alto, USA, March 29, 2025 - SquareX has disclosed a new form of ransomware that operates natively within web browsers and is undetectable by traditional antivirus software. This browser-native ransomware poses a significant threat to enterprises, potentially putting millions at risk. The disclosure comes as ransomware continues to be a major cybersecurity concern, with Chainalysis estimating that corporations spend nearly $1 billion annually on ransom payments alone. The true cost, however, is often much higher due to reputational damage and operational disruption.

SquareX's research highlights that unlike traditional ransomware, this new variant does not require victims to download and install malicious files. Instead, it targets the user's digital identity, exploiting the increasing reliance on cloud-based enterprise storage and browser-based authentication. SquareX founder, Vivek Ramachandran, warns that the rise in browser-based identity attacks indicates that the "ingredients" for browser-native ransomware are already being used by adversaries. He emphasizes the need for browser-native solutions to combat this emerging threat, as traditional endpoint security measures are ineffective against these attacks.

ImgSrc: www.lastwatchdo

References :

• gbhackers.com: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• hackread.com: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• The Last Watchdog: News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus
• NextBigFuture.com: Palo Alto, USA, 29th March 2025, CyberNewsWire
• thehackernews.com: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• Daily CyberSecurity: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• hackernoon.com: Ransomware attacks typically involve tricking victims into downloading and installing the ransomware, which copies, encrypts, and/or deletes critical data on the device, only to be restored upon the ransom payment.
• Cyber Security News: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• gbhackers.com: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• ciso2ciso.com: SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
• ciso2ciso.com: News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus – Source: www.lastwatchdog.com
• securityboulevard.com: News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus
• www.scworld.com: Significant enterprise data compromise could be facilitated by browser-native ransomware attacks, which set sights on users' digital identities and exploit the increasing adoption of cloud-based enterprise storage instead of depending on the execution of malicious files, SiliconAngle reports.

Classification:

• HashTags: #Ransomware #BrowserNative #SquareX
• Company: SquareX
• Target: Enterprises
• Product: SquareX
• Feature: undetectable
• Malware: Browser-native ransomware
• Type: Ransomware
• Severity: Major