An extension I used almost every day was bought by a new owner and loaded up with spyware. It happened in 2024, but Google ...

This is where the popular Chrome extension Save Image as Type comes in (or used to come in). With over a million users at its ...

Do you use the Chrome extension "Save image as Type?" If so, you are one of more than one million users who woke up this morning to find out that Google has disabled the extension in your Chrome web ...

How can an extension change hands with no oversight?

Abstract: attacks to get complete control on the victim’s data. Ransomware attackers will demand money in the form of ransom to decrypt the encrypted data in the system. There are many ways for ...

This simple script tamed my Downloads folder.

IntroductionOn March 1, 2026, ThreatLabz observed new activity from a China-nexus threat actor targeting countries in the Persian Gulf region. The activity took place within the first 24 hours of the ...

Malicious Chrome extensions tied to ownership transfers push malware and steal data, exposing thousands to credential theft and system compromise.

Distributed through over 100 GitHub repositories, the BoryptGrab stealer targets browser, wallet, system, and other user data ...

BlackBox AI, a popular VS Code coding assistant, has a critical indirect prompt injection vulnerability. Hackers can exploit this to gain remote root access to a user’s computer.

Malicious AI browser extensions collected LLM chat histories and browsing data from platforms such as ChatGPT and DeepSeek. With nearly 900,000 installs and activity across more than 20,000 enterprise ...

Security researchers demonstrated that any browser extension can secretly install malware by modifying downloaded files ...