Tag: browser extensions

4 Attack Reports | 0 Vulnerabilities

Attack reports

Silent Credit Card Thief Uncovered

A sophisticated credit card skimming campaign dubbed 'RolandSkimmer' has been discovered, targeting users in Bulgaria. The attack utilizes malicious browser extensions across Chrome, Edge, and Firefox, initiated through a deceptive LNK file. The malware employs obfuscated scripts to establish persi…

evasion techniques

browser extensions

obfuscated scripts

credit card skimming

financial data theft

Published: April 4, 2025

Downloadable IOCs: 0

Targeted supply chain attack against Chrome browser extensions

In December 2024, a threat actor successfully compromised around a dozen legitimate Chrome browser extensions by exploiting extension developers' permissions gained through phishing attacks. The malicious code injected into the compromised extensions aimed to harvest sensitive user data like API ke…

browser extensions

data harvesting

Published: January 22, 2025

Downloadable IOCs: 80

Regarding the Cyberhaven chrome extension compromise, there are other...

Several Chrome extensions have been compromised, including those related to Cyberhaven. The affected extensions are linked to multiple suspicious domains resolving to the same IP address as cyberhavenext[.]pro. Some confirmed compromised extensions are listed with their corresponding URLs. Users ar…

browser extensions

Published: December 27, 2024

Downloadable IOCs: 14

Cyber startup employee hacked to distribute malicious Chrome extension

Several Chrome extensions have been compromised, including those related to Cyberhaven. The affected extensions are linked to multiple suspicious domains resolving to the same IP address as cyberhavenext[.]pro. Some confirmed compromised extensions are listed with their corresponding URLs. Users ar…

browser extensions

Published: December 27, 2024

Downloadable IOCs: 1

Click here to see more Attack Reports