Supply Chain Attack Targets Chrome Extensions to Deliver Malicious Code
On December 26, 2024, Cyberhaven disclosed a significant supply chain attack targeting Chrome browser extensions.
The attackers leveraged phishing emails to deceive extension developers...
Chrome Released Security Update With the Fixes for Type Confusion RCE Vulnerability
Google has announced an update to the Stable channel of Google Chrome for desktop users and released a fix for high severity remote code...
LegionLoader Hijacks Chrome Extensions to Spread Infostealer Malware
LegionLoader, a C/C++ downloader malware, first emerged in 2019 and has been actively evolving by employing various tactics, including delivering malicious Chrome extensions that...
Critical Chrome Flaw Lets Malicious Apps Control Your PC
Researchers discovered critical vulnerabilities in Chromium that enabled malicious Chrome extensions to bypass the browser's sandbox and execute arbitrary code on the host system,...
Beware: Malicious Chrome Extension Delivers Weaponized ZIP Files
Researchers identified a LummaC2 stealer malware attack in August 2024 involving a drive-by download of a malicious ZIP archive containing an MSI file, which...