ShadyPanda Hack Compromises 4.3 Million Users via Malicious Browser Extensions

ShadyPanda Hack Compromises 4.3 Million Users via Malicious Browser Extensions

First seen 4 Dec 2025, 14:42 UTC •DarkreadingSecurityboulevard •82% similarity •36.1

Article Content

Browse articles
ThreatCluster

The China-based cyber-threat group ShadyPanda has infected 4.3 million users through malicious browser extensions on the Google Chrome and Microsoft Edge marketplaces. The group has been operating for years, utilizing these extensions to spy on users, highlighting vulnerabilities in trust and marketplace review processes.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

ShadyPanda Microsoft Edge