New details reveal how hackers hijacked 35 Google Chrome extensions
New information has surfaced on a phishing campaign that targeted developers of Chrome browser extensions and compromised at least 35 extensions, including those from cybersecurity company Cyberhaven, to introduce code that stole data.
Initial reports concentrated on Cyberhaven's security-focused extension, but further research showed that at least 35 extensions, used by almost 2,600,000 users, had the same code injected into them.
According to targeted developers' complaints on Google Groups and LinkedIn, the most recent effort began around December 5, 2024. But as early as March 2024, BleepingComputer discovered previous command and control subdomains read more about New details reveal how hackers hijacked 35 Google Chrome extensions.
Get up to date on the latest cybersecurity ...