A recent cybersecurity investigation uncovered 131 malicious Chrome extensions involved in hijacking web traffic to inject unauthorized ads and steal sensitive user data. These extensions, downloaded by millions, exploited browser permissions to redirect users to fraudulent sites and collect personal information without consent. The widespread nature of this threat highlights the critical need for users to scrutinize browser extensions and for platforms to enforce stricter vetting processes. This article delves into the modus operandi of these extensions, the risks posed to users, and recommended security measures to mitigate such threats. It also discusses the role of cybersecurity firms and browser developers in identifying and removing these malicious extensions to protect the online ecosystem. Users are advised to regularly review installed extensions, update their browsers, and utilize reputable security tools to safeguard their digital privacy and security.
This Cyber News was published on thehackernews.com. Publication date: Mon, 20 Oct 2025 21:44:03 +0000