Tag: chrome extensions

2 Attack Reports | 0 Vulnerabilities

Attack reports

Data-stealing Chrome extensions impersonate Fortinet, YouTube, VPNs

A campaign targeting the Google Chrome Web Store has deployed over 100 malicious browser extensions masquerading as legitimate tools like VPNs, AI assistants, and crypto utilities. These extensions, while offering some promised functionality, secretly connect to threat actor infrastructure to steal…
data theft
browser security
malicious domains
chrome extensions
2025-05-22
google web store
remote script execution
cookie stealing
vpn impersonation
Published: May 22, 2025
Downloadable IOCs: 25

Hidden Threats of Dual-Function Malware Found in Chrome Extensions

An unknown threat actor has been creating malicious Chrome browser extensions since February 2024, using fake websites to lure users into installing them. These extensions have dual functionality, appearing to work as intended while also connecting to malicious servers to steal user data and execut…
data theft
code execution
2025-05-21
traffic manipulation
lure websites
chrome extensions
api endpoints
Published: May 21, 2025
Downloadable IOCs: 100
Click here to see more Attack Reports