Foxnews

NexShield Malware Extension Crashes PCs to Install Malware

First seen 16 Feb 2026, 15:10 UTC • Foxnews

•91% similarity •29.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Security researchers have identified a malicious browser extension named NexShield that masquerades as an ad blocker for Chrome and Edge. Upon installation, it intentionally crashes the browser, misleading users into executing harmful commands that compromise their systems. Users of both Chrome and Edge are affected by this scam.

ThreatCluster AI

Timeline

2026-02-13

NexShield malware extension discovered

2026-02-16

Articles published detailing NexShield's tactics

Attack Flow

12 entities, 14 inferred relationships (STIX 2.1).

Technique (3)

Malware
T1059.001 - PowerShell
T1059.003 - Windows Command Shell

Campaign (1)

CrashFix

Malware (2)

ClickFix
ModeloRAT

Affected Platform (3)

Chrome Web Store
Microsoft Edge
Windows

Tool (3)

Google Chrome
Command Prompt
PowerShell

Relationships

CrashFix uses ClickFix
CrashFix uses ModeloRAT
Malware targets Chrome Web Store
Malware targets Microsoft Edge
Malware targets Windows
T1059.001 - PowerShell targets Chrome Web Store
T1059.001 - PowerShell targets Microsoft Edge
T1059.001 - PowerShell targets Windows
T1059.003 - Windows Command Shell targets Chrome Web Store
T1059.003 - Windows Command Shell targets Microsoft Edge
T1059.003 - Windows Command Shell targets Windows
CrashFix related to Google Chrome
CrashFix related to Command Prompt
CrashFix related to PowerShell

Community

Browse all →

NexShield Malware Extension Crashes PCs to Install Malware

Ask AI about this cluster

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading