287 Chrome Extensions Exfiltrate Browsing History From 37.4 Million Users
ID: e40c14aa-b25c-5a36-87ae-22b200791072
STIX ID: report--e40c14aa-b25c-5a36-87ae-22b200791072
Feed Name: cybersecurityNews.com
A research investigation uncovered a widespread data-exfiltration campaign involving 287 Chrome extensions that collected and exfiltrated browsing histories from approximately 37.4 million users. The malicious extensions used obfuscation (ROT47), strong encryption (AES-256 with RSA), and covert network transmissions to remote servers; popular and high-installation extensions and analytics vendors were implicated, and honeypots confirmed third-party scraping and potential monetization of the stolen data, raising significant privacy and corporate-espionage concerns.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.