TLDR Tech / InfoSec
Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data
Researchers discovered more than 300 malicious Chrome extensions with 37.4 million combined downloads that leaked browsing history, injected iframes, and stole user data. 153 extensions were confirmed to exfiltrate browser history immediately upon installation. A separate LayerX report identified 30 extensions disguised as AI tools that share identical internal structures and backend infrastructure, with 15 specifically targeting Gmail to extract email content and transmit it to third-party servers. Organizations should audit installed browser extensions against published indicators, enforce extension allowlisting policies, and monitor for anomalous network traffic originating from browser processes.
Read the full story