287 Malicious Chrome Extensions Steal Browsing Data from 37.4 Million Users

A security research team discovered 287 Chrome extensions that secretly send users' browsing data to remote servers, impacting about 37.4 million installs. Using an automated Docker-based browser testbed and a leakage metric (R) to detect URL-dependent outbound traffic, the researchers identified definite and probable leakers, published findings and a GitHub repository, and observed downstream activity against honey URLs implicating analytics/data-broker infrastructure.