true77
Hackers target Chrome extensions with malicious code
Several companies fell victim to a cyberattack on their Chrome extensions this Christmas, as hackers inserted malicious code in an attempt to steal user data. This attack was first reported by cyber security company Cyberhaven, which was among the affected companies.
Phishing email leads to the attack
The hackers behind the attack targeted a Cyberhaven employee through a phishing email, tricking them into inputting their login credentials on a fake page. This initial breach allowed the hackers to push out an updated version of the Chrome extension with the malicious code to users.
Other Chrome extensions affected by this attack include Internxt VPN, ParrotTalks, Uvoice, and VPNCity, each with tens of thousands of users. The hackers were not specifically targeting these companies, but rather conducting a mass phishing campaign and exploiting any recipients who fell for the scam.
