Over 2.6 Million Users at Risk After Chrome Extensions Are Hacked
A new security breach has affected over 2.6 million Chrome users through popular browser extensions. Attackers tricked extension developers with a fake email, convincing them to grant special permissions to a malicious app. Once approved, the attackers added harmful code to trusted extensions, allowing them to steal personal data like login details and browsing information.
The first sign of the attack came from cybersecurity firm Cyberhaven, whose employee was targeted on December 24, 2024. This led to the spread of the malicious code in several widely used extensions, including tools for AI chat and VPN services.
Experts warn that extensions—small tools that enhance your browser experience—can access sensitive data, making them vulnerable targets for hackers. While some affected extensions have been removed from the Chrome Web Store, users are still at risk if they haven’t updated or removed these extensions from their browsers.
It's a reminder to carefully review the extensions you have installed and remove any that seem suspicious or outdated to protect your privacy.
Source: ?https://thehackernews.com/2024/12/16-chrome-extensions-hacked-exposing.html