TLDR Tech / IT
Chrome extension acquisitions turning productivity tools into enterprise credential harvesters
Researchers describe a growing attack pattern where criminals buy popular Chrome extensions from legitimate developers and push malicious updates that harvest corporate credentials and session data. Several productivity extensions used in enterprises were converted into surveillance tools after ownership changes, allowing attackers to collect internal SaaS credentials and browser data. The trend exposes a blind spot for IT teams relying on MDM or endpoint policies that approve extensions only at install time.
Read the full story