What happens when Chrome Extensions get sold?
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
A legitimate Chrome extension called Quick Lens was sold on a marketplace and converted into malware that stole crypto and deployed ClickFix attacks on 7,000 users. The extension gained new permissions to strip browser security headers, enabling JavaScript injection from a C2 server. A marketplace exists where extensions with
•9m watch time
Sort: