Thehackernews
Malicious Chrome Extensions Compromise Data from Over 170 Websites
First seen 25 Dec 2025, 04:03 UTC
•

•83% similarity
•28.7
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Two malicious extensions named 'Phantom Shuttle' were found in the Chrome Web Store, stealing user credentials from over 170 websites. These extensions were disguised as proxy plugins, allowing them to evade traditional security measures. The incident highlights the challenges posed by modern cyberattacks that exploit trusted tools.
ThreatCluster AI
How this analysis works