It is possible to load sites using WebView, similarly to how web browsers communicate with websites.ĭesigned to enrich native desktop applications, WebView2's rich functionality makes it an attractive option for malicious developers. Developers may embed HTML, CSS and JavaScript code in the custom-built application. Microsoft Edge is used to render the web content in the native applications. At its core, WebView2 enables developers to embed web content into their Windows desktop applications.

To better understand the attack, it is necessary to take a closer look at Microsoft Edge WebView2. While it is necessary that the application is executed on the victim's system, it is giving attackers lots of flexibility and options, especially in regards to sign-ins to online services.

Security researcher mr.dox developed a new attack that uses Microsoft Edge WebView2 functionality to steal account credentials, bypass two-factor authentication and exfiltrate cookies. Attackers devised new attacks to overcome two-factor authentications.

Microsoft edge webview2 virus