A fake Microsoft Authenticator extension appeared in the Chrome Web Store. The extension was available for almost a month before it was taken down. The fake extension prompted people to fill out ...
All extensions seem to have been made by a single actor, possibly of Russian origin.
More than 100 malicious extensions in the official Chrome Web Store are attempting to steal Google OAuth2 Bearer tokens, ...