Netcrook
#malicious extensions
Ad Blockers as Sleeper Agents: The Browser Extension Trap Behind AI Chat Harvesting
A reported extension campaign tied to about 90,000 browser users shows how a utility add-on can become a quiet collection point for sensitive AI chats and account details.
GlassWorm’s Shutdown Shows Why Developer Tools Are Now High-Value Targets
A coordinated disruption of GlassWorm-linked command-and-control infrastructure highlights how supply-chain malware can live closest to the people who build software, not just the systems that run it.
Chrome’s Dirty Hundred: Malicious Extensions Steal Accounts and Hijack Browsers in Global Scam
A vast network of rogue Chrome extensions is siphoning Google tokens, hijacking Telegram accounts, and flooding users with ads-right under Google’s nose.
Inside Chrome’s AI Blind Spot: How a Single Flaw Let Extensions Spy Through Your Webcam
A critical bug in Chrome’s Gemini Live AI panel granted rogue extensions a backstage pass to your camera, mic, and files-no clicks required.
Chrome’s Rogue Code: How Malicious Extensions Are Plundering Your Business, Inbox, and Digital Life
A new wave of browser extensions is quietly siphoning sensitive data from millions-posing an unprecedented threat to business and personal security.
Bait and Crash: How Malicious Browser Extensions Are Hijacking Your Security
Cybercriminals deploy fake ad blockers and browser crash warnings to deliver a stealthy new Python-based trojan into corporate networks.
Corporate Spies in Your Browser: How Malicious Extensions Are Hijacking Private Meetings
Millions of users are unknowingly leaking sensitive corporate meeting data through popular browser add-ons linked to a China-based cybercrime operation.
Code Compromised: Malicious VSCode Extensions Turn Developer Tools into Data Thieves
Two rogue Visual Studio Code extensions secretly stole credentials, crypto wallets, and more-raising urgent questions about supply chain security in developer ecosystems.
VSCode’s Trojan Horse: Malicious Extensions Loot Developer Data in Microsoft’s Own Marketplace
Rogue Visual Studio Code add-ons have infiltrated Microsoft’s trusted ecosystem, planting sophisticated infostealers on unsuspecting developers’ machines.