TLDR InfoSec · ATTACKS & VULNERABILITIES

TIME TO CHECK IF YOU RAN ANY OF THESE 33 MALICIOUS CHROME EXTENSIONS

arstechnica.com6 min read

Summary from the TLDR InfoSec newsletter

Researchers discovered 33 compromised Chrome extensions affecting 2.6 million devices during the holiday season. The incident began when Cyberhaven's extension was hijacked through a phishing attack on Christmas Eve, leading to malicious code that stole sensitive data including Facebook and ChatGPT credentials.