Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft

AI Summary

Two Chrome extensions, QuickLens and another tool originally developed by BuildMelon, turned malicious after ownership transfer to enable code injection and data theft. The extensions now push malware to downstream users and harvest sensitive data, highlighting risks of browser extension supply chain attacks.

Read full article → https://thehackernews.com/2026/03/chrome-extension…

Relevance score: 70.0/100

# More from March 10

1
New Attack Against Wi-Fi Schneier on Security
2
FBI investigating ‘suspicious activities’ on agency network following February incident The Record
3
Dutch govt warns of Signal, WhatsApp account hijacking attacks BleepingComputer
4
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device The Hacker News
5
ShinyHunters claims ongoing Salesforce Aura data theft attacks BleepingComputer
6
Microsoft Teams phishing targets employees with backdoors BleepingComputer
7
Ericsson US discloses data breach after service provider hack BleepingComputer
8
Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials The Hacker News
10
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure The Hacker News