#Browser Extension
All CosmicBytez Labs articles tagged #Browser Extension, across news, security advisories, how-to guides, and projects.
- News
KREMLIN Malware Force-Installs Malicious Chrome and Edge Extensions
Elastic found KREMLIN, a banking malware toolkit that forges Chrome/Edge integrity checks to sideload data-stealing extensions without user consent.
- News
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
"Twitch Enhanced Viewer | JeetBot" forwarded OAuth tokens in cleartext to a Russian bot service's proxy, exposing roughly 31,000 users.
- News
Twitch Extension With 30K Installs Exposes Users' OAuth Tokens
Twitch Enhanced Viewer | JeetBot, installed 30,000+ times, quietly forwarded users' OAuth tokens to a Russian commercial bot service, Socket found.
- News
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Researchers at Guardio disclosed a now-patched vulnerability chain in the Adobe Acrobat Chrome extension dubbed HermeticReader, which could allow...
- News
Google and Microsoft Pull ModHeader After Hidden Tracker Found in 1.6M-Install Extension
Google and Microsoft have removed ModHeader — a popular HTTP header editor with 1.6 million installs across Chrome and Edge — after researchers discovered...
- News
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Microsoft uncovered a fake Perplexity AI Chrome extension that silently captured every search query and address bar keystroke, routing the data to an...