logo

DarkSpectre Hackers Spread Malware to 8.8 Million Chrome, Edge, and Firefox Users

ID: b3c650ff-54ef-5759-b587-266c3aa756b4

STIX ID: report--b3c650ff-54ef-5759-b587-266c3aa756b4

Feed Name: Cyber Press

Threat Score
85/100

Date Published: 2025-12-31

Date Updated: 2026-04-19

Author: Priya

...
...

**DarkSpectre** is a China-linked threat group operating three interconnected browser-extension malware campaigns (ShadyPanda, GhostPoster, The Zoom Stealer) that have infected an estimated 8.8 million users across Chrome, Edge, Firefox, and Opera over seven years, enabling surveillance, e-commerce fraud, and corporate espionage via techniques like steganography, remote configuration, and WebSocket-based exfiltration to Firebase/Cloud Functions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.