Netcrook
#Chrome extension
Trusted Release Keys Turned Into a Supply-Chain Weapon
A maintainer-account takeover can do more damage than a single malicious file, especially when one publish pipeline reaches several software ecosystems at once.
Fake Perplexity Extension Turned Chrome Searches Into a Quiet Target
A lookalike browser add-on used a trusted AI brand to win installs, showing how extension permissions can turn ordinary searches into sensitive telemetry.
Fake Chrome Extension Impersonating Perplexity Put Search Privacy at Risk
A deceptive browser add-on mimicking a popular AI brand highlights how extensions can collect search and browsing data when users grant broad permissions.
When a Browser Add-on Becomes a Hidden Control Plane
A popular Chrome ad blocker tied to YouTube carries a dormant script-injection path, showing how a trusted extension can turn into a post-install risk if its server-side behavior changes.
A Popular Chrome Add-On Was Found to Have Dormant Script Injection Capability
A widely installed YouTube ad blocker shows how even a familiar browser extension can carry page-level power that deserves scrutiny.
When a Browser Extension Starts Talking Back: The Windows Command Channel Hiding in Plain Sight
A phishing-led malware chain reportedly used Chrome’s native messaging path to move from browser space into Windows command execution, showing how ordinary integrations can become security boundaries in practice.
Chrome’s Trust Model Becomes the Attack Surface in a Windows Extension Campaign
A campaign abusing policy-controlled installs and Native Messaging shows how a browser can be turned into a command relay when trusted management features are misused.
When AI Sidebars Become Browser Risk Engines
Named flaws in two popular Chrome extensions underline how an AI helper with broad page access can turn convenience into high-impact compromise risk.
When a Browser Helper Becomes the Weak Link
Two reported flaws in AI-focused Chrome extensions show how a message-handling bug can turn a convenience add-on into a high-risk trust boundary.
When a Wallpaper Add-On Starts Acting Like an Ad Machine
A cluster of Chrome live wallpaper extensions was linked to user-data logging, disguised click traffic, and routing activity toward ad sites, turning a simple browser add-on into a trust problem.
Fake AI Helpers Turn Developer Trust Into a Credential Trap
Malicious JetBrains plugins and suspicious browser add-ons are putting AI keys and chatbot conversations in the crosshairs, showing how software supply chains can become data-collection pipelines.
Browser Wallpapers, Hidden Signals, and a Quiet Ad Fraud Pipeline
A large Chrome extension cluster blurred customization and monetization, using install and uninstall behavior that appears designed to imitate real user traffic.
Chrome’s Manifest V2 Cutoff Puts Popular Ad Blockers on the Clock
Google is ending support for Chrome extensions built on Manifest V2 later this month, a shift that is expected to affect uBlock Origin and other ad blockers built for the older framework.
The Browser Isn’t Innocent: 152 Chrome Wallpaper Add-Ons and the Quiet Economy of Fake Traffic
A large Chrome extension cluster tied to wallpaper and new-tab tools shows how ordinary-looking add-ons can become a vehicle for adware-style monetization.
When a Browser Extension Becomes a Search Gatekeeper
A Chrome extension campaign tied to 23 add-ons and an estimated 758,000 users shows how search settings can be turned into a quiet control point for privacy abuse and phishing risk.
Ad Blockers as Sleeper Agents: The Browser Extension Trap Behind AI Chat Harvesting
A reported extension campaign tied to about 90,000 browser users shows how a utility add-on can become a quiet collection point for sensitive AI chats and account details.
Search Settings Turned Into a Revenue Trap Inside Chrome
A 23-extension campaign shows how a browser add-on can quietly redirect everyday searches and turn user intent into monetized traffic.
Browser Trust Turned into a Search-Noise Engine
A network of Chrome extensions tied to dozens of publisher accounts shows how ordinary add-ons can be repurposed into coordinated deception at scale.
Chrome Extensions Turn a Browser Corner Into a Trust Trap
A coordinated extension network linked to fake search activity and hidden data collection shows how browser trust can be bent without a visible break-in.
Chrome VPN Extensions: Small Install, Narrow Shield
These browser add-ons are easy to add from the Chrome Web Store, but their protection is limited to traffic generated inside the browser.