Browser Locked in Full Screen? It Might Be Malware

You’ve probably heard about phishing scams, suspicious downloads, and why it’s essential to avoid clicking on untrustworthy links. However, a new kind of malware is taking things further by trying to annoy you into giving up your login details. It gets your browser locked in full screen mode, giving you the impression that you’re trapped and that the only way out is to enter your credentials.

This particular strain of malware hasn’t been named, but it’s part of a larger cyber threat called “Amadey,” which has been growing since August 2024. The malware manipulates your computer’s “kiosk mode” (a setting typically used on public computers that limits access to a single window) to lock your browser and send you to a fake Google password reset page. Why Google? It’s all about the statistics. Google Chrome is the most used web browser by far, with nearly 50% of UK users favouring this over other browsers.

The Locked-In Malware

Let’s dive deeper into how this malware works, how you can escape from your browser being locked in full screen mode, and the steps you can take to keep your team and business safe.

---

How This Malware Operates

The malware’s goal is simple but effective: lock your browser in full-screen mode, block normal exit options, and trick you into entering your Google login details. Here’s how it unfolds:

1. Browser Lockdown: The malware activates “kiosk mode,” locking your browser in full-screen mode. This setting hides all usual navigation buttons, such as the address bar, menu, and minimise/close buttons, making it seem like there’s no way out.
2. Fake Google Page: Once in full-screen mode, the malware sends you to a fake Google password reset page that looks convincing. It prompts you to enter your password, leading you to believe this is the only way to unlock your screen.
3. Credential Theft: The moment you type in your password, a second piece of malware lurking in the background intercepts your credentials, sending them directly to cybercriminals.

Escape a Browser Locked In Full Screen

If your browser is ever locked in full screen, there are ways to break free without entering your details. Here’s what to try:

• Use Keyboard Shortcuts:
  • Press ALT + TAB to switch to a different open program.
  • Press ALT + F4 to attempt to force-close the browser.
  • Open Task Manager by pressing CTRL + ALT + DELETE. Find the browser in the list, right-click, and select “End Task.”
• Reboot Your PC:
  • If none of the above options work, press and hold the power button to shut down your PC manually. Wait a few moments, then turn it back on.
  • If your computer is plugged into an outlet, unplugging and reconnecting the power can also force a reset.

Note: If you repeatedly encounter the full-screen lock or similar issues, it’s a sign your system may be infected. In this case, it’s best to consult an IT expert, as you may need to scan for and remove any malware.

Preventing Infection: Steps to Safeguard Your System

Taking a few proactive steps can reduce the risk of your computer becoming infected. Follow these practices to avoid falling victim to these types of cyber scams:

Stay Cautious with Links

• Avoid clicking on links in unsolicited emails, especially from unknown senders.
• If an email looks suspicious but appears to be from a trusted source, double-check the URL by hovering over the link without clicking to verify its authenticity.

Download Attachments Carefully

• Only open attachments from trusted contacts and verified sources. Malware can easily be disguised in attachments.

Implement Browser Safety Measures

• Use a reputable antivirus program that can detect and block suspicious behaviour on websites.
• Many cybersecurity programs now offer “safe browsing” modes or extensions to protect your browser from malware and phishing attacks.

Educate Your Team

• Conduct regular cybersecurity training to help employees spot the latest scams. Make sure they know what to do if their browser goes into full-screen mode or if they encounter suspicious prompts.
• Teach your team never to enter login details on websites they’re unsure about, especially if they’re prompted unexpectedly.

Keep Systems Updated

• Ensure that your browser and antivirus software are updated regularly. Developers often release patches that protect against the latest cyber threats, including new forms of malware.

Enable Multi-Factor Authentication (MFA)

• Even if a hacker obtains your password, multi-factor authentication requires an additional form of verification, making it harder for cybercriminals to access your accounts.

Recognising the Signs of Malware: Red Flags to Watch Out For

Being aware of malware warning signs can help you take action before any damage is done:

• Unusual Computer Behaviour: If your browser suddenly goes into full-screen mode without prompting, this is a potential warning.
• Unexpected Pop-Ups: Pop-up windows or ads that appear more frequently than usual can be a sign of malware.
• Slow Performance: Malware often uses system resources, which can slow down your computer.
• Unknown Programs Running: Keep an eye on your Task Manager. If you see unfamiliar programs running, investigate them to see if they’re legitimate.

Nxt Steps

Cybersecurity threats are always evolving, and protecting your business means staying a step ahead. By being vigilant and following these preventive measures, you can reduce the risk of falling victim to malicious attacks like this full-screen malware.

If you’d like assistance in securing your business, from employee training to advanced cybersecurity tools, we’re here to help. Contact us today to find out how Nxt Gen IT can strengthen your security and keep your systems safe.