GhostPoster Malware Campaign Targets Chrome Users via 17 Malicious Extensions

Cyberpress • January 19, 2026

Researchers at Koi Security traced the malicious network to 17 confirmed extensions, with the threat actor initially targeting Microsoft Edge users in ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

17 Malicious Chrome Extensions in GhostPoster Campaign Compromise User Data Cybercriminals have distributed 17 malicious browser extensions across Chrome, Firefox, and Edge, with over 840,000 installations. The GhostPoster campaign, active since at least 2020, utilized deceptive names to masquerade as legitimate tools while stealing user data. Users of these extensions are at risk of compromised security due to years of unnoticed exploitation. 3 sources 31

Extracted Entities

GhostPoster Malware Campaign Targets Chrome Users via 17 Malicious Extensions

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Malware (1)

Platforms (1)

Tools (1)