Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim’s ChatGPT data. A threat actor has created 16 browser extensions to steal users’ ...

A few weeks ago, we covered DarkSpectre, a threat actor responsible for running numerous spyware campaigns that, combined, infected a total of at least 8.8 million Google Chrome, Mozilla FireFox, and ...

PCWorld reports that over 840,000 users were infected by malicious browser extensions containing GhostPoster malware hidden in extension logos. These harmful extensions operated undetected in official ...

Good browsers work well with their standard features alone. They can protect you when browsing online, autofill your login information, and manage your favorite websites with ease. Some go beyond and ...

Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity. The applications, called ‘Chat GPT for Chrome with GPT-5, Claude Sonnet ...

Chrome extensions are supposed to make your browser more useful, but they've quietly become one of the easiest ways for attackers to spy on what you do online. Security researchers recently uncovered ...

In early December 2025, security researchers exposed a cybercrime campaign that had quietly hijacked popular Chrome and Edge browser extensions on a massive scale. A threat group dubbed ShadyPanda ...

A long-running malware campaign quietly evolved over several years and turned trusted Chrome and Edge extensions into spyware. A detailed report from Koi Security reveals that the ShadyPanda operation ...

A hot potato: Cybersecurity researchers have uncovered a sophisticated malware campaign that infected millions of computers via browser extensions on the Chrome Web Store and Microsoft Edge add-ons ...

PIE is a new installer for PHP extensions, intended to eventually replace PECL. It is distributed as a PHAR, just like Composer, and works in a similar way to Composer, but it installs PHP extensions ...

I built 10 simple, secure Chrome extensions to fix everyday browsing gaps, from quick notes and site shortcuts to clean copy, per-site tasks, highlights, temp snippets, dummy passwords, quick IDs, and ...

The change is currently tested in Edge Canary and affects user consent and control over Chrome Web Store extension installs. Microsoft is known for aggressive Edge promotion inside Windows and Bing.