Hacker Remotely Accessed PC with No Obvious App

A user observed a hacker accessing her saved passwords in Chrome. At some point a splash screen came up and said “Working on an update. Do not restart your system”. Subsequently her Amazon account was hacked.

Shame on her for saving passwords in browsers, but…. We reviewed her installed software and found nothing new nor suspicious. She also said she had not clicked on any suspicious links (of course).

We are getting her PC back for forensics…. Any thoughts as …

account amazon app browsers chrome course cybersecurity hacked hacker links passwords point screen shame software system update working