'ShadyPanda' Hackers Weaponize Millions of Browsers

ShadyPanda, likely a China-based threat actor, ran a multi-year campaign that weaponized legitimate Chrome and Edge extensions—infecting an estimated 4.3 million users—to perform continuous browser surveillance, exfiltrate browsing history, search queries, clicks and credentials, and deliver remote-code-execution backdoors via poisoned updates; the operation exploited weaknesses in extension marketplace review processes and can reweaponize millions of installs at any time.