Signal
108 Malicious Chrome extensions steal user data and inject ads via shared infrastructure
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-04-14 08:35 UTCUpdated 2026-04-14 11:30 UTC
rss
cveexploitsmalwaresecurity_tooling
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
A coordinated campaign involving 108 malicious Google Chrome extensions has been uncovered, targeting around 20,000 users.
Entities
Google
Score total
1.02
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
- The discovery affects 20,000 users, highlighting ongoing risks in browser extension ecosystems.
- The campaign uses a single infrastructure to control many extensions, increasing impact.
- Recent findings emphasize the need for vigilance and improved extension vetting processes.
Why it matters
- Browser extensions can abuse permissions to steal sensitive user data and compromise privacy.
- Shared command-and-control infrastructure indicates coordinated malicious campaigns.
- Users of popular browsers like Chrome remain vulnerable to large-scale extension-based attacks.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- 108 malicious Chrome extensions steal user data and inject ads via a shared command-and-control infrastructure
How sources frame it
- Infosecurity Magazine: neutral
- The Hacker News: neutral
All evidence
All evidence
Malicious Chrome Extensions Campaign Exposes User Data
Infosecurity Magazine · infosecurity-magazine.com · 2026-04-14 11:30 UTC
108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users
The Hacker News · thehackernews.com · 2026-04-14 08:35 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- Infosecurity Magazine (1)
- The Hacker News (1)
Top origin domains (this list)
- infosecurity-magazine.com (1)
- thehackernews.com (1)