ShadyPanda Malware Infects 4.3M Browsers with Chrome Edge Extensions

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Browser Extensions Infect 4.3M Users with Spyware A seven-year campaign involving malicious browser extensions has infected 4.3 million Google Chrome and Microsoft Edge users with malware, including backdoors and spyware that transmit data to servers in China. The attackers, identified as ShadyPanda, published seemingly legitimate extensions, amassing millions of downloads before deploying the malware. Notably, five of these extensions remain active in the Edge marketplace. 12 sources 44