Topic: user deception

Malicious Chrome Extensions Steal HR Platform Credentials

January 18, 2026

80%

Malicious Chrome Extensions Steal HR Platform Credentials

Malicious Chrome extensions disguised as legitimate tools were discovered stealing login credentials and sabotaging security functions on major enterprise HR and ERP platforms. The extensions enabled persistent account access through continuous cookie theft and actively blocked critical security ...

New Facebook Login Scam Uses Sneaky Browser-in-Browser Trick

A sophisticated phishing campaign uses a deceptive "browser-in-the-browser" (BitB) technique to create fake, convincing login windows within a victim's browser, targeting Facebook users to steal credentials for fraud. Attackers lure victims with phishing emails posing as legal notices or security...

Chrome Extensions Caught Hijacking Affiliate Links and ChatGPT Logins

Malicious extensions on the Chrome Web Store are hijacking e-commerce affiliate commissions and stealing sensitive data, including ChatGPT authentication tokens, by exploiting browser permissions. These extensions, such as "Amazon Ads Blocker," often combine deceptive features, violate store poli...