Learn how the ShadyPanda campaign turned trusted browser extensions into spyware and the steps security teams can take to ...

A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt ...

A long-running malware operation known as "ShadyPanda" has amassed over 4.3 million installations of seemingly legitimate Chrome and Edge browser extensions that evolved into malware. The operation, ...

A sophisticated malware operation has infected 4.3 million Chrome and Edge browser users via malicious browser extensions that masqueraded as legitimate tools for years before being weaponized. The ...

A seven-year browser extension campaign has infected 4.3 million Chrome and Edge users. The group responsible, tracked as ShadyPanda, has been observed leveraging trusted browser marketplaces to build ...

Editor's note: Microsoft has reached out to us regarding the story below and has issued the following update: "We have removed all the extensions identified as malicious on Edge Add-on store. When we ...

Remember Windows 3.1? If there's a thrill when you think about it, you can relive the whole environment at one masterful programmer's website.

Recent exploits are a reminder that when you install an extension, you grant it a lot of power to see where you go online and ...

Urban VPN Proxy, which claims to protect users' privacy, collects data from conversations with ChatGPT, Claude, Gemini, ...

A long-running malware campaign quietly evolved over several years and turned trusted Chrome and Edge extensions into spyware. A detailed report from Koi Security reveals that the ShadyPanda operation ...

Koi's investigation identified eight such extensions available on the Chrome Web Store and Microsoft Edge Add-ons page, collectively surpassing eight million installations. Seven of them carried ...