The extension that opens whatever tab its server tells it to
A malicious browser extension can let a remote server open any tab — an ad, a redirect, a fake login. How it works, and how to check and remove them fast.
Maxim Kosterin
7 min read
All tags
Articles tagged "malware"
10 articles found
GlassWorm botnet takedown: how to check if your extensions are still infected
The GlassWorm takedown by CrowdStrike and Google won't uninstall anything. Here's how to check for malicious browser extensions still sitting in your browser.
Maxim Kosterin
10 min read
108 Chrome extensions, one server: how to check yours for session theft
Socket found 108 Chrome extensions routing logins and live Telegram sessions to a single server. Here's how the campaign worked and how to check your own.
Maxim Kosterin
10 min read
Fake ad blocker crashes your browser on purpose: how to spot the CrashFix trap
A fake uBlock Origin clone crashed Chrome on purpose, then tricked users into running malware. Here's how to spot the CrashFix trap and check your extensions.
Maxim Kosterin
8 min read
Malware hidden in extension icons: how to check your browser for GhostPoster
GhostPoster hid malware inside extension icon images for up to five years across Chrome, Firefox, and Edge. Here's how steganography works and what to check.
Maxim Kosterin
8 min read
Browser extension sideloading attacks: how to detect SNOWBELT before it owns your enterprise
A sideloaded browser extension is how UNC6692's SNOWBELT runs inside headless Edge, skipping Web Store review entirely. Here's how to detect it in your org.
Maxim Kosterin
10 min read
GlassWorm: how to check if the IDE supply chain attack installed a Chrome infostealer
GlassWorm malware compromised 72+ Open VSX IDE extensions to drop a Chrome infostealer that steals session cookies via Solana C2. Here's what to check today.
Maxim Kosterin
11 min read
ShadyPanda: how to find browser extensions that turned malicious after you installed them
ShadyPanda ran 145 malicious browser extensions on Chrome and Edge for 6 years — from affiliate fraud to keylogging spyware, 4.3M installs. How to check yours.
Maxim Kosterin
10 min read
Zero-permission malware droppers: how to check if any of your extensions can be weaponized
A zero-permission extension can still drop malware: LayerX Labs showed any extension can silently backdoor your downloads. How to check and stay safe.
Maxim Kosterin
9 min read
Sleeper extensions go cross-browser: how to find hidden malware in your Firefox, Chrome, and Edge add-ons
17 malicious sleeper extensions found across Firefox, Chrome, and Edge with 840K downloads. They hid malware in images for up to 5 years undetected.
Maxim Kosterin
8 min read