Microsoft has dismantled the StegoAd operation, removing 119 malicious Edge extensions that used steganography to hide malware within image and font files. The campaign, active since 2021, targeted over 2.6 million…
LayerX Security researchers have revealed that any browser extension can secretly install malware, highlighting a significant security vulnerability. In response, Push Security has launched new detection capabilities to…
A seven-year campaign involving malicious browser extensions has infected 4.3 million Google Chrome and Microsoft Edge users with malware, including backdoors and spyware that transmit data to servers in China. The…
The ShadyPanda malware campaign has been identified as a significant threat, converting legitimate browser extensions into spyware. This campaign has been active for several years, affecting users of various browsers,…
The China-based cyber-threat group ShadyPanda has infected 4.3 million users through malicious browser extensions on the Google Chrome and Microsoft Edge marketplaces. The group has been operating for years, utilizing…
A campaign named Zoom Stealer has been identified, affecting 2.2 million users of Chrome, Firefox, and Microsoft Edge through 18 malicious browser extensions. These extensions are designed to collect sensitive online…
A campaign involving malicious browser extensions has compromised over 4 million users across Firefox, Chrome, and Microsoft Edge. Specifically, 17 malicious Firefox extensions infected over 50,000 users by embedding…
Two malicious Chrome extensions, disguised as proxy tools, have been stealing sensitive user data since at least 2017. Named 'Phantom Shuttle', these extensions have been active in the Chrome Web Store and primarily…