logo

How to find and remove credential-stealing Chrome extensions

ID: dbe5af53-c35e-5203-aea7-4f03de920b8d

STIX ID: report--dbe5af53-c35e-5203-aea7-4f03de920b8d

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2026-02-13

Date Updated: 2026-04-28

...
...

Researchers identified a campaign of 30 malicious Chrome extensions in the Web Store that exfiltrated credentials from more than 260,000 users by loading remote full‑screen iframes that overlaid webpages; the report enumerates extension names and unique 32-character IDs and provides user removal instructions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.