ThreatCluster

17 Malicious Chrome Extensions in GhostPoster Campaign Compromise User Data

First seen 19 Jan 2026, 10:01 UTC •GbhackersCybersecuritynewsCyberpress •86% similarity •31

Article Content

Browse articles
ThreatCluster

Cybercriminals have distributed 17 malicious browser extensions across Chrome, Firefox, and Edge, with over 840,000 installations. The GhostPoster campaign, active since at least 2020, utilized deceptive names to masquerade as legitimate tools while stealing user data. Users of these extensions are at risk of compromised security due to years of unnoticed exploitation.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

GhostPoster GhostPoster Malware Campaign Edge Firefox Microsoft Edge