Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft

Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft

/in

Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data.
The extensions in question, both originally associated with a developer named “akshayanuonline@gmail.com” (BuildMelon), are listed below –

QuickLens – Search Screen with

The Hacker News – ​Read More

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical I...Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical InfrastructureInternet Infrastructure TLD .arpa Abused in Phishing Attacks