ModHeader Browser Extension Removed After Hidden Collector Discovery
ModHeader, a popular header-editing browser extension with 1.6 million installs, was removed from Chrome and Edge web stores after researchers found a…
Tag: Browser Extension
Google and Microsoft Pull ModHeader Extension With 1.6 Million Installs After Dormant Data Collector Found
Google and Microsoft have removed the ModHeader browser extension from their respective web stores after security researchers discovered a dormant browsing-history collector…
ForgCookie Browser Extension for Session Theft
ForgCookie is a Chromium browser extension used by Forg365 to automatically refresh SSO cookies for Microsoft services, enabling continued access to compromised…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is targeting Microsoft 365 accounts using device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, AI-assisted…
MetaMask: Cryptocurrency Wallet Browser Extension
MetaMask is a popular browser extension that serves as a cryptocurrency wallet and gateway to decentralized applications. BlueNoroff's implant enumerates browser extensions…
Coinbase Wallet: Browser Extension for Cryptocurrency
Coinbase Wallet is a browser extension that allows users to store and manage cryptocurrencies; it fixed the cross-site tracking vulnerability.
Google Notes: Fake Extension Used in Silent Swap Campaign
Google Notes is a fake browser extension masquerading as a benign utility, used in the Silent Swap campaign to deploy a crypto…
VPN Go: Free VPN: Malicious Browser Extension with Clipboard Stealer
VPN Go: Free VPN is a malicious browser extension available on Chrome Web Store and Firefox Add-ons that presents itself as a…
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
Cybersecurity researchers have flagged an active browser extension campaign designed to steal cryptocurrency by stealthily replacing wallet addresses during transactions. The cryptocurrency…
Silent Swap: Crypto Clipper Campaign Using Fake Google Notes Extension
Silent Swap is a cryptocurrency clipper campaign identified by McAfee Labs that uses unsigned installers to deploy a malicious Chromium extension masquerading…