TLDR InfoSec · QUICK LINKS

MALICIOUS CHROME EXTENSION CRASHES BROWSER IN CLICKFIX VARIANT 'CRASHFIX'

links.tldrnewsletter.com4 min read

Summary from the TLDR InfoSec newsletter

A malicious Chrome extension called NexShield impersonates uBlock Origin Lite and crashes the browser to display fake security warnings that trick users into running PowerShell commands, deploying the ModeloRAT trojan on corporate systems.