TARGETED SUPPLY CHAIN ATTACK AGAINST CHROME BROWSER EXTENSIONS

Summary from the TLDR InfoSec newsletter

A supply chain attack targeted Chrome browser extensions in December, compromising developers through phishing emails to upload malicious versions to the Chrome Web Store. The attacker aimed to harvest sensitive data from users' web browsers by injecting malicious code into compromised extensions. This sophisticated attack potentially impacted hundreds of thousands of end users.