Browser extensions put 4M users at risk of cookie theft

Posted by annextuckner on Friday April 11, 2025 @01:20PM
from the arstechnica.com dept.

https://arstechnica.com/security/2025/04/researcher-uncovers-dozens-of-sketchy-chrome-extensions-with-4-million-installs/

( 2 comments | on HN )

Re:Browser extensions put 4M users at risk of cookie theft by gnabgib on Friday April 11, 2025 @03:52PM (#43657803)

Original source: https://secureannex.com/blog/searching-for-something-unknow/ (13 points, 6 comments) https://news.ycombinator.com/item?id=43653922

[ Parent | on HN ]

Re:Browser extensions put 4M users at risk of cookie theft by annextuckner on Friday April 11, 2025 @01:20PM (#43656202)

The extensions, which so far number at least 35, use the same code patterns, connect to some of the same servers, and require the same list of sensitive systems permissions, including the ability to interact with web traffic on all URLs visited, access cookies, manage browser tabs, and execute scripts.

[ Parent | on HN ]