'ShadyPanda' Hackers Weaponize Millions of Browsers

Darkreading •Jai Vijayan, Contributing Writer • December 3, 2025

The China-based cyber-threat group has been quietly using malicious extensions on the Google Chrome and Microsoft Edge marketplaces to spy on millions of users.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShadyPanda Hack Compromises 4.3 Million Users via Malicious Browser Extensions The China-based cyber-threat group ShadyPanda has infected 4.3 million users through malicious browser extensions on the Google Chrome and Microsoft Edge marketplaces. The group has been operating for years, utilizing these extensions to spy on users, highlighting vulnerabilities in trust and marketplace review processes. 2 sources 36

Extracted Entities

'ShadyPanda' Hackers Weaponize Millions of Browsers

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Countries (1)

Platforms (1)

Tools (1)