highMalware
Malware-Framework Extensions Infiltrate Chrome and Edge Web Stores
Threat actors deploy malicious browser extensions to steal cryptocurrency, browser data, and inject ClickFix lures
CyberIntel Desk1 min read
Key Takeaways
- Multiple Chrome and Edge extensions were found delivering a malware framework.
- The framework stole cryptocurrency, browser history, and sensitive user data.
- ClickFix lures were injected to trick users into executing further actions.
- The malicious extensions were available in the Chrome Web Store and Microsoft Edge Add-ons store.
- Google and Microsoft are expected to remove the extensions and improve vetting procedures.
Related Security News
highCyber Attacks
Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations
Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.
The Hacker News1 min read
