Malicious Browser Extensions are the Next Frontier for Identity Attacks
ID: 1c2a7c91-1a8e-5492-9eb7-04a07b2b475d
STIX ID: report--1c2a7c91-1a8e-5492-9eb7-04a07b2b475d
Feed Name: Bleeping Computer
Threat Score
A large-scale campaign compromised more than 35 Chrome browser extensions—affecting roughly 2.6 million users—to steal cookies and authentication tokens, exposing identities and enabling account takeover and session hijacking; the report details extension permission risks, recommended CISO mitigations (audit, categorize, enumerate permissions, assess risk, apply controls), and notes LayerX’s offered remediation/audit services.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.