Suspicious "ChromeSync" pop-up in Android requesting credentials
Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account.
I noticed that the pop-up will appear whenever the UI of any App resembles a login page, i.e. has text input fields and keywords such as "username" and "password". For example, the Reddit client App has an input field for the recipient's username on the messaging UI, thus will trigger the pop-up to appear.
I have tried disabling the Sync service on my mobile Chrome Browser, but the pop-up still occurs. I have also tried revoking the permissions for "Display over other apps" for all apps, but the pop-up still persists.
Is this normal behavior? Have my device been compromised?
