Imposter Netflix Chrome Extension Dupes 100k Users

McAfee researchers analyzed a malicious Chrome extension campaign (combined ~100,000 installs) that impersonates popular browser add-ons (e.g., Netflix Party) to monitor visited sites, redirect users on gift-card pages to phishing hosts, exfiltrate gift card/PII to attacker-controlled servers, inject affiliate cookies to monetize purchases, and insert chat windows for additional data collection. The report details the extension manifest/background/content scripts, observed phishing IPs and data-post endpoints, targeted retail domains (including top-ranked sites), and provides detection names and protective measures.