Skip to content

// #enterprise-browsers

1 article

💻 AppSec

108 Malicious Chrome Extensions Exfiltrating Browser Data Removed from Web Store

Google has removed 108 extensions from the Chrome Web Store after researchers identified a coordinated malicious extension campaign conducting browser credential harvesting, session cookie theft, and clipboard monitoring across millions of installations. The extensions impersonated productivity tools, ad blockers, and security tools — with some active for over 18 months before detection. Enterprise Chrome deployments should audit installed extensions against the published IOC list.

#chrome-extensions +6