A cyberattack campaign has inserted malicious code into multiple Chrome browser extensions, targeting specific social media advertising and AI platforms, beginning in mid-December.
Cyberhaven believes a phishing email initiated the attack, with the malicious code targeting Facebook Ads accounts and spreading to VPN and AI extensions.
Security researcher Jaime Blasco found the same malicious code in various extensions, indicating a broader, random attack rather than a directed effort against Cyberhaven.
Following the attack, Cyberhaven issued a clean version of their data loss prevention extension after identifying and removing the malicious code shortly after its discovery.
Collection
[
|
...
]