logo

Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users

ID: 5f96e1db-a701-5340-9d16-4fe9f7e9472c

STIX ID: report--5f96e1db-a701-5340-9d16-4fe9f7e9472c

Feed Name: McAfee Labs Blog

Threat Score
70/100

Date Published: 2022-08-29

Date Updated: 2026-04-28

Author: McAfee Labs

...
...

**Executive Summary:** McAfee Labs identified five Chrome extensions (combined >1.4M installs) that send users' visited URLs to attacker-controlled servers (e.g., d.langhort.com), then inject affiliate redirects/iframes or set cookies on targeted eCommerce sites to steal commissions; the report provides technical analysis (manifest, b0.js behavior, timing evasion), extension IDs, domains, behavioral flow, and detection/mitigation notes.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.