Zoom Stealer Extensions Compromise 2.2 Million Users' Meeting Data

A campaign named Zoom Stealer has been identified, affecting 2.2 million users of Chrome, Firefox, and Microsoft Edge through 18 malicious browser extensions. These extensions are designed to collect sensitive online meeting information, including URLs, IDs, topics, descriptions, and embedded passwords. The threat actor behind this campaign, known as DarkSpectre, has been linked to multiple browser extension campaigns impacting over 7.8 million users over the past seven years.