SquareX has developed a 'polymorphic attack' that allows malicious extensions to pose as password managers, cryptocurrency wallets or banking apps to steal sensitive information, and has warned ...

Launched by browser security provider LayerX, the free ExtensionPedia seeks to help individuals and enterprises alike by ...

Researchers from DomainTools have discovered over 100 malicious extensions in the Chrome Web Store that can steal users' data ...

Extensions are plug-ins that give your web browser superpowers - or at the very least, capabilities it didn't have right out ...

Many of the malicious extensions are riding the coattails of well-known brands such as Fortinet, YouTube, Deepseek AI, and ...

Everybody uses browser extensions at home and at work, but can you always trust that ad blocker or coupon finder not to steal ...

GitLab researchers have discovered 16 malicious Chrome extensions that injected code to commit fraud and disable security measures against cross-site scripting (XSS). More than 3.2 million users ...

Two Ukrainian men used online quizzes to lure more than 60,000 Facebook users into installing malicious browser extensions that exfiltrated their profile data and friends lists to offshore servers ...

News has been making headlines over the weekend of the extensive attack campaign targeting browser extensions and injecting them with malicious code to steal user credentials. Currently, over 25 ...

Not only does the malicious extension use the actual code from the legitimate Darcula theme, but it also includes an added script to extract system information, such as hostname, domain, platform, ...

An unknown threat actor is deploying a large-scale, sophisticated cryptojacking campaign through a series of malicious extensions in Visual Studio Code, Microsoft’s lightweight source-code editor, ...

All malicious extensions detected by the researchers were responsibly reported to Microsoft for removal. However, as of writing this, the vast majority remains available for download via the ...