This Christmas, Google Chrome Extensions taken over by hackers in a cyberattack, according to a new report from Reuters.
The cyberattack was first noted by Cyberhaven—a cybersecurity company. In a blog post, the company said that hackers inserted malicious code into the Chrome extensions in an attempt to steal user data like web browser cookies and verification. The attackers were looking to get access to social media Ads accounts and AI platform credentials. Cyberhaven also said on Christmas Eve hackers released an updated version of its Chrome extension with the malware code. However, the company knew about the hack on Christmas Day and instantly pushed out a fix within an hour and informed the users about this instance with an email notification.
In addition to that, other Google Chrome extensions taken over by hackers in a cyberattack around the same time. These include Internxt VPN, ParrotTalks, Uvoice, and VPNCity. Well, Google already shared the warning that was issued for holiday scams to avoid any of the scams.
If you use any of the extensions mentioned above, then you must remove them from the browser or update the published version after December 26. For more security, reset important account passwords, clear browser data, and reset browser settings to their original defaults.
