Signal
Microsoft removes 119 malicious Edge extensions and a deceptive Chrome extension exploiting AI branding
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-06-29 08:32 UTCUpdated 2026-06-29 22:38 UTC
rss
cveexploitsmalwaresecurity_toolingincident_response
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.4 top sources shown
Overview
Microsoft has dismantled a large-scale malware campaign involving 119 malicious Edge browser extensions collectively called StegoAd. These extensions, downloaded by 2.6 million users, initially offered useful tools but later downloaded malware that stole credentials, hijacked sessions, and ran ad fraud.
Entities
MicrosoftGoogleStegoAdPerplexity AI
Score total
1.58
Momentum 24h
5
Posts
5
Origins
4
Source types
1
Duplicate ratio
0%
Why now
- The StegoAd campaign affected 2.6 million users before removal, showing scale and persistence.
- New AI-branded malicious extensions exploit user trust in emerging technologies.
- Timely removal of these extensions prevents further data theft and fraud.
Why it matters
- Malicious browser extensions can covertly steal credentials and hijack sessions, posing serious security risks.
- Steganography techniques in malware complicate detection and mitigation efforts.
- Intercepting search and browsing data enables profiling and targeted attacks.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- Microsoft removed 119 malicious Edge extensions involved in a malware campaign called StegoAd
- StegoAd campaign used steganography to hide malicious JavaScript in images and fonts
- A malicious Chrome extension impersonated Perplexity AI to intercept searches and address bar input
How sources frame it
- Malwarebytes Threat Analysis: neutral
- Microsoft Defender Security Research Team: neutral
All evidence
All evidence
Microsoft dismantles StegoAd campaign using malicious Edge extensions
SC Media · scworld.com · 2026-06-29 22:38 UTC
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
thehackernews · thehackernews.com · 2026-06-29 18:40 UTC
Chromium extension uses AI‑related branding to redirect browser search
Microsoft Security Blog · microsoft.com · 2026-06-29 16:27 UTC
119 Edge extensions promised useful tools, instead downloaded malware
Malwarebytes Threat Analysis · malwarebytes.com · 2026-06-29 14:41 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 0
Top publishers (this list)
- SC Media (1)
- thehackernews (1)
- Microsoft Security Blog (1)
- Malwarebytes Threat Analysis (1)
Top origin domains (this list)
- scworld.com (1)
- thehackernews.com (1)
- microsoft.com (1)
- malwarebytes.com (1)