Back Thehackernews

ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

Thehackernews • December 1, 2025

Cloud threats are getting smarter—and harder to see. Join our experts to learn how code-to-cloud detection reveals hidden risks across identities, AI, and Kubernetes, helping you stop attacks before they reach production.

Community patching is fast, flexible, and easy to get wrong. This session shows how to build guardrails, spot repo risks early, and balance speed with security using proven, field-tested methods.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Browser Extensions Infect 4.3M Users with Spyware A seven-year campaign involving malicious browser extensions has infected 4.3 million Google Chrome and Microsoft Edge users with malware, including backdoors and spyware that transmit data to servers in China. The attackers, identified as ShadyPanda, published seemingly legitimate extensions, amassing millions of downloads before deploying the malware. Notably, five of these extensions remain active in the Edge marketplace. 12 sources 44

ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)