Foxnews

NexShield Malware Extension Crashes PCs to Install Malware

First seen 16 Feb 2026, 15:10 UTC • Foxnews

•29.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Security researchers have identified a malicious browser extension named NexShield that masquerades as an ad blocker for Chrome and Edge. Upon installation, it intentionally crashes the browser, misleading users into executing harmful commands that compromise their systems. Users of both Chrome and Edge are affected by this scam.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Timeline

2026-02-13

NexShield malware extension discovered

2026-02-16

Articles published detailing NexShield's tactics

Attack Flow

12 entities, 14 inferred relationships (STIX 2.1).

Technique (3)

Malware
T1059.001 - PowerShell
T1059.003 - Windows Command Shell

Campaign (1)

CrashFix

Malware (2)

ClickFix
ModeloRAT

Affected Platform (3)

Chrome Web Store
Microsoft Edge
Windows

Tool (3)

Google Chrome
Command Prompt
PowerShell

Relationships

CrashFix uses ClickFix
CrashFix uses ModeloRAT
Malware targets Chrome Web Store
Malware targets Microsoft Edge
Malware targets Windows
T1059.001 - PowerShell targets Chrome Web Store
T1059.001 - PowerShell targets Microsoft Edge
T1059.001 - PowerShell targets Windows
T1059.003 - Windows Command Shell targets Chrome Web Store
T1059.003 - Windows Command Shell targets Microsoft Edge
T1059.003 - Windows Command Shell targets Windows
CrashFix related to Google Chrome
CrashFix related to Command Prompt
CrashFix related to PowerShell

Continue Reading

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants Russian GRU Hackers Use Fake CAPTCHAs to Compromise Ukrainian Users Rapid7 Reports Surge in Vulnerability Exploitation Outpacing Patching Efforts ACSC Issues Critical Alert on Exploited CMS Vulnerabilities Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs

NexShield Malware Extension Crashes PCs to Install Malware

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading