Foxnews

Malicious Chrome Extensions Compromise User Accounts

First seen 26 Jan 2026, 20:48 UTC • Foxnews

•32.8

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cybersecurity researchers have identified malicious Google Chrome extensions that impersonate legitimate business tools, including Workday, NetSuite, and SAP SuccessFactors. These extensions can steal login credentials and disable security measures without alerting users. Many individuals who installed these extensions were unaware of the risks involved.

How this analysis works

Attack Flow

12 entities, 16 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Malware
Phishing

Organization (3)

NetSuite
SAP SuccessFactors
Workday

Malware (1)

WhatsApp Web Malware

Affected Platform (4)

Android
Chrome Web Store
IOS
Windows

Tool (1)

Google Chrome

Relationships

WhatsApp Web Malware targets NetSuite
WhatsApp Web Malware targets SAP SuccessFactors
WhatsApp Web Malware targets Workday
Data Breach targets Android
Data Breach targets Chrome Web Store
Data Breach targets IOS
Data Breach targets Windows
Malware targets Android
Malware targets Chrome Web Store
Malware targets IOS
Malware targets Windows
Phishing targets Android
Phishing targets Chrome Web Store
Phishing targets IOS
Phishing targets Windows
WhatsApp Web Malware related to Google Chrome

Continue Reading

DOUBLECUP Service Delivers Malware via Cached PNG Images HungerRush POS System Faces Extortion Threat Over Customer Data Malicious Chrome Extensions Target Enterprise HR and ERP Systems LayerX Identifies Browser Extension Malware Concealed in PNG Files

Malicious Chrome Extensions Compromise User Accounts

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading