Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users
ID: 5f96e1db-a701-5340-9d16-4fe9f7e9472c
STIX ID: report--5f96e1db-a701-5340-9d16-4fe9f7e9472c
Feed Name: McAfee Labs Blog
Threat Score
**Executive Summary:** McAfee Labs identified five Chrome extensions (combined >1.4M installs) that send users' visited URLs to attacker-controlled servers (e.g., d.langhort.com), then inject affiliate redirects/iframes or set cookies on targeted eCommerce sites to steal commissions; the report provides technical analysis (manifest, b0.js behavior, timing evasion), extension IDs, domains, behavioral flow, and detection/mitigation notes.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
