Chrome Web Store extensions caught stealing crypto, browser data
Malicious Chrome and Edge extensions discovered in official stores delivered a modular malware framework for crypto theft and data exfiltration, underscoring the ongoing gap in marketplace vetting for enterprise-used browsers.
Summary written by editorial AI · Source link below
Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures. [...]
Editorial Analysis
Browser extensions operate with high privileges inside the user session, making marketplace-based supply-chain attacks a persistent blind spot for enterprises that don't enforce extension policies.
Implement a browser extension allowlist and regularly audit installed extensions against known-malicious hashes.
Malicious browser extensions distributed through official stores stole sensitive data, highlighting the need for enterprise extension governance.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Threat Intel Desk
- Attackers conceal phishing lures using invisible Unicode characters1d
- Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication1d
- Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner1d
- Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials2d
- Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain2d