5 Malicious Chrome Extensions Attacking Enterprise HR and ERP Platforms for Complete Takeover

Cybersecuritynews •Tushar Subhra Dutta • January 19, 2026

Five coordinated malicious Chrome extensions have emerged as a sophisticated threat to enterprise security, targeting widely-used human resources and financial platforms used by thousands of organizations worldwide. These extensions operate in concert to steal authentication tokens, disable security controls, and enable complete account takeover through session hijacking. The campaign affects Workday, NetSuite, and SuccessFactors—critical systems […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Chrome Extensions Target Enterprise HR and ERP Systems Five malicious Chrome extensions have been identified as a coordinated threat to enterprise HR and ERP platforms, specifically targeting Workday, NetSuite, and SuccessFactors. These extensions facilitate account takeover by stealing authentication tokens and disabling security controls, impacting thousands of organizations globally. 2 sources 30

5 Malicious Chrome Extensions Attacking Enterprise HR and ERP Platforms for Complete Takeover

The full story

Extracted Entities

Attack Types (1)

Companies (3)