San Francisco, December 30, 2024 —Hackers infiltrated popular Chrome extensions, exposing user data worldwide. Victims are advised to secure accounts immediately as experts warn of severe implications.
In a chilling new wave of cybercrime, hackers have injected malicious code into multiple Chrome extensions, leaving millions of users exposed. The breach, which began mid-December, has compromised popular extensions like ParrotTalks, Uvoice, VPNCity, and Cyberhaven.
The attack targeted sensitive data, including Facebook Ads credentials, access tokens, and two-factor authentication data. Cyberhaven, one of the affected companies, disclosed:
The attackers aimed to hijack social media advertising accounts and AI platforms, stealing critical user data in the process.
Jaime Blasco, a cybersecurity expert at Nudge Security, added:
This is a sophisticated phishing campaign with a devastating reach, potentially affecting thousands of unsuspecting users.
The malicious code enabled hackers to intercept user IDs, cookies, and even assist in bypassing two-factor authentication by logging click events. Cyberhaven discovered the breach on Christmas Day, managing to neutralize the threat within an hour and releasing a secure update for its extension. However, the damage had already been done.
Experts are urging users to take immediate action by revoking credentials, changing passwords, and monitoring accounts for unusual activity. Affected users are encouraged to follow Cyberhaven’s advisory email sent on December 26 for detailed recovery steps.
This attack highlights the growing vulnerability of browser extensions, often overlooked yet deeply integrated into user workflows. With Chrome extensions collectively boasting over 300 million downloads, the scale of this breach is alarming.
Other News At VPNRanks
- Second Wave of Stolen Cisco Data Sparks Security Alarm
- Do Kwon Extradited: $40B Crypto Fraud Unveiled in US Court
- Steam Deck Rival: ROG Ally X Outshines with Bazzite OS
- DoubleClickjacking Exploit Bypasses Top Web Security Protections
- Chinese Hackers Breach US Treasury, Exploit Vendor Access
- Massive Data Breach Hits DAP Health: Sensitive Info Exposed
Hey, wait!
Stay informed on the latest privacy updates, cybersecurity insights, and internet freedom news by following VPNRanks news daily! As your primary resource for critical updates in online security, we ensure you’re always in the know. Make VPNRanks your go-to guide for safeguarding your digital life!
