logo

Browser extensions turn nearly 1 million browsers into website-scraping bots

ID: 92fd5463-8260-5190-908b-f352abcad663

STIX ID: report--92fd5463-8260-5190-908b-f352abcad663

Feed Name: Ars Technica Security

Threat Score
75/100

Date Published: 2025-07-09

Date Updated: 2026-04-19

Author: Dan Goodin

...
...

The report explains that multiple browser extensions using a tracking library collected and shared sensitive user data (including documents, photos, medical and financial information, and corporate proprietary files), reminiscent of the 2019 Nacho Analytics data-scraping operation. It provides counts of affected extensions across Chrome, Edge, and Firefox, notes some removals or remediation, and links to a published list of identified extensions and a vendor response.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.