Over 100 Malicious Chrome Extensions Discovered Engaging in Session Hijacking and Credential Theft

Since February 2024, security researchers have identified over 100 malicious Chrome extensions posing significant cybersecurity risks. These extensions, initially appearing as harmless utilities, incorporate covert functionalities that enable session hijacking, credential theft, and ad injection, compromising user privacy and security. Operated by an unknown threat actor, these malicious add-ons exfiltrate sensitive data, execute arbitrary code, and can receive remote commands, making them a formidable threat vector. The deceptive nature of these extensions underscores the importance of vigilant browser security practices. Users are urged to verify extension legitimacy, remove unnecessary add-ons, and keep browsers updated to mitigate potential attacks. This ongoing campaign highlights the need for heightened awareness and proactive cybersecurity measures to prevent data breaches and maintain online safety.