Technology ❯ Cybersecurity ❯ Malware

Browser Extensions

Chrome Extensions Data Theft Malicious Extensions Cryptocurrency Theft User Safety Google Chrome ChatGPT-based Tools Threat Actors Identity Theft Zoom Stealer Command and Control Social Engineering ShadyPanda Campaign ShadyPanda Malicious Chrome Extensions Ad Fraud Spam Campaigns Session Hijacking Crypto Copilot Crypto Malware Cryptocurrency Tools Trust Wallet Cryptocurrency Wallets Trust Wallet Exploit AI Assistants Enterprise Security Impact on Users Google Chrome Extensions DarkSpectre Deceptive Tactics NexShield Smart Ad Blocker Gmail Extensions Chrome Add-ons User Privacy StegoAd StegoAd Campaign Microsoft Edge Command and Control Systems User Data Theft Firefox Extensions Firefox Add-ons OAuth Tokens Chrome and Edge Extensions

KREMLIN Malware Force‑Installs Chrome and Edge Extensions to Steal Brazilian Banking Credentials

Elastic registered the malware’s anti‑sandbox domain, temporarily stopping the infection chain on machines that contacted it.

Twitch Extension Routed 31,000 Users' OAuth Tokens Through Russian Proxy Network

Malicious Browser Extensions Stole Crypto and Personal Data From Tens of Thousands

Researchers Link Dozens of Firefox Extensions to Crypto Wallet Theft Campaign

Jewelbug Uses One Control Panel to Run State Espionage and Mass Crypto Theft

Malicious Chrome Extension Posing as Perplexity AI Logged Users' Searches

Microsoft Removes 119 Edge Extensions That Hid Malware Inside Images and Fonts

Researchers Uncover 108 Malicious Chrome Extensions Tied to One Data-Stealing Backend

Google Pulls Popular 'Save Image as Type' Chrome Extension Over Malware

Chrome 146 Brings Desktop-Style Bookmarks Bar to Android Tablets and Foldables

30+ AI-Themed Chrome Extensions Steal Emails and Credentials From 260,000–300,000 Users

Researchers Find 16 Malicious ‘ChatGPT’ Extensions Stealing Session Tokens

Huntress Uncovers 'CrashFix' Browser Extension That Crashes Chrome to Push ModeloRAT

Trust Wallet Opens Refund Claims After Chrome Extension Hack, Cites Leaked Web Store Key

ShadyPanda Weaponized Trusted Browser Extensions Into RCE Backdoors, Hitting 4.3 Million Users

Chrome Extension 'Crypto Copilot' Found Skimming Solana Swaps With Hidden Fees

Malicious 'Safery' Chrome Wallet Still Live, Steals Seed Phrases via Sui Microtransactions

DEF CON Demo Shows Browser Extensions Can Hijack Passkeys