logo

Malicious Chrome Extensions Campaign Exposes User Data

ID: cc0ff152-ab57-5565-b136-54c425b489cd

STIX ID: report--cc0ff152-ab57-5565-b136-54c425b489cd

Feed Name: Infosecurity Magazine (News)

Threat Score
78/100

Date Published: 2026-04-14

Date Updated: 2026-04-22

...
...

**Large-scale malicious Chrome extension campaign:** Security researchers uncovered 108 malicious Chrome extensions (spread across multiple developer identities) that secretly collect sensitive data, hijack active sessions (including a Telegram-focused extension capturing sessions every 15 seconds), persist via backdoors, inject ads/scripts, and expose stolen data via a shared command-and-control infrastructure and a Malware-as-a-Service model, impacting roughly 20,000 users; takedown requests have been submitted.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.