Malicious Code Found in Popular Chrome Extensions: Delete Them Now! [Video]

Millions at Risk: Malicious Code Found in Popular Chrome Extensions

Cybersecurity experts warn users to delete compromised extensions immediately.

Popular chrome extensions designed ‌to‍ enhance browsing experiences have been weaponized by hackers, putting millions of users​ at risk. Cybersecurity‌ firm Cyberhaven recently uncovered a sophisticated attack targeting 36 popular extensions, collectively downloaded over 2.6 million times. These‍ extensions, some compromised for provided that 18 months, were laced with malicious code designed to steal sensitive user data, including cookies, login credentials, and financial facts.

The attack, which began in March 2024, targeted chrome extension developers through a highly convincing phishing campaign.

Posing as ‌Google, attackers‍ sent emails warning​ developers​ about a supposed violation of Chrome extension policies. The emails, designed to instill urgency, ‍claimed the extensions were ⁢at risk of⁣ removal due to “needless details” in their descriptions.

Deceived developers were then directed to a fake Chrome Web Store page where thay were tricked into granting attackers access to manage …