X @BSCN

Socket Uncovers 108 Malicious Chrome Extensions Stealing Sessions And Google IdentitiesSocket's Threat Research Team (@SocketSecurity) has identified 108 malicious Chrome extensions running as a coordinated campaign under a shared command and control infrastructure, with roughly 20,000 combined installs.The extensions are published under five different publisher names, but all route stolen data to the same operator.-54 extensions harvest Google account identities via OAuth2, capturing email, name, profile p ...