> Search

12 results for “extensions”

Fake Firefox Wallets Target Recovery Phrases

Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.

A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.

Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.

Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.

Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.

A malicious VS Code extension pack targets developers, exfiltrating wallets, credentials, and API keys via Telegram.

A malicious campaign on the Open VSX marketplace deployed 77 counterfeit extensions to harvest developer metadata.

A popular header-editing tool was removed from major stores after researchers discovered a silent, encrypted exfiltration system.

A new subscription tier offers indefinite lifecycle extensions for RHEL, targeting industries with long-term infrastructure needs.

Federal agencies face a tight three-day deadline to patch critical remote code execution vulnerabilities in popular Joomla extensions.

Critical RCE flaws in popular Joomla extensions leave unauthenticated websites vulnerable to total compromise by malicious actors.

The exploitation of critical Joomla extensions highlights a broader trend of automated campaigns targeting vulnerable CMS plugins globally.