Get the latest tech news
Cyber firm’s Chrome extension hijacked to steal user passwords
The data-loss startup says it was targeted as part of a "wider campaign to target Chrome extension developers."
In a brief emailed statement, Cyberhaven said its security team detected the compromise in the afternoon of December 25, and that the malicious extension (version 24.10.4) was then removed from the Chrome Web Store. Cyberhaven offers products that it says protect against data exfiltration and other cyberattacks, including browser extensions, which allow the company to monitor for potentially malicious activity on websites. Blasco told TechCrunch that he is still investigating the attacks, and believes at this point that there were more extensions compromised earlier this year, including some related to AI, productivity, and VPNs..
Or read this on TechCrunch
