Chrome Extension Chaos: 600,000 Users Exposed in Massive Hack Attack
In a supply chain attack, threat actors compromised 16 Chrome browser extensions, exposing data from over 600,000 users. One of the victims, Cyberhaven, saw a malware-laced version of its extension published. The attack targeted publishers via phishing, allowing hackers to insert malicious code and steal cookies and access tokens.
Hot Take:
When it comes to Chrome extensions, it seems like the real “extension” here is the hackers’ reach! Who knew “updating your browser” could actually mean “giving hackers a VIP pass to your data party”? Next time your browser requests an update, you might want to consider telling it, “Thanks, but I like my cookies where they are!”
Key Points:
- 16 Chrome browser extensions were compromised, affecting over 600,000 users.
- Threat actors used phishing attacks to gain access to publishers’ accounts on the Chrome Web Store.
- The malicious code in the extensions was used to steal cookies and access tokens.
- Cybersecurity firm Cyberhaven was among the victims, with a malicious version of their extension published briefly.
- The attack was part of a broader campaign targeting Facebook Ads users.
Already a member? Log in here