A phishing campaign targeting TRON wallet users has been identified, involving a fake Chrome extension masquerading as the TronLink wallet. This malicious extension employs Unicode bidirectional control characters and…
A recent study identified 28 malicious LLM proxy routers that can modify AI service responses and access sensitive credentials. The research tested 28 paid routers and 400 free routers, revealing that nine injected…
Two Chrome extensions, 'Smart Adblocker' and 'Adblock for Browser', have been discovered to exfiltrate user prompts and responses from major AI platforms including ChatGPT, Claude, and Gemini. These extensions,…
A significant supply chain attack was uncovered involving the acquisition of the Essential Plugin company, which led to backdoors being inserted into at least 30 WordPress plugins. The malicious code remained dormant…
The Adblock for YouTube Chrome extension, with over 11 million installs, has been found to contain dormant JavaScript injection capabilities that could be activated by a single server-side change. This vulnerability…
A seven-year campaign involving malicious browser extensions has infected 4.3 million Google Chrome and Microsoft Edge users with malware, including backdoors and spyware that transmit data to servers in China. The…
Trust Wallet has confirmed a security vulnerability in version 2.68 of its browser extension, leading to the theft of funds from hundreds of users, totaling at least $6 million. Users are advised to disable the…
Urban VPN Proxy, a popular free browser extension, has been found to collect and export full AI chat conversations from users. The extension injects hidden scripts into AI chat services, capturing prompts, responses,…
A malicious campaign named CrashFix has been identified, utilizing a fake ad-blocking browser extension called NexShield to crash users' browsers. This tactic is employed to facilitate ClickFix attacks, delivering a new…
A campaign named Zoom Stealer has been identified, affecting 2.2 million users of Chrome, Firefox, and Microsoft Edge through 18 malicious browser extensions. These extensions are designed to collect sensitive online…