Get the latest tech news
Polymorphic Chrome Extensions Impersonate Password Managers to Steal Credentials
Malicious Chrome extensions dubbed "polymorphic" impersonate legitimate extensions such as password managers to steal credentials.
Security researchers at SquareX Labs uncovered this technique, which allows attackers to clone any installed extension’s icon, interface, and functionality while temporarily disabling the legitimate version. The attack targets popular Chromium-based browsers, including Google Chrome and Microsoft Edge, posing a serious risk to users relying on extensions for password management, financial transactions, and other sensitive tasks. However, SquareX has proposed several countermeasures for Google Chrome, including restricting sudden extension icon and HTML changes or introducing user notifications when such changes occur.
Or read this on Hacker News