Malicious Chrome extensions can spoof password managers in new attack

Malicious "polymorphic" Chrome extensions can mimic other tools to trick victims

A malicious browser extension can assume the appearance of another one, and disable it at the same time, experts warn.

Google Chrome at risk from shape-shifting browser extensions — how to stay safe

SquareX has devised a new attack method that allows malicious browser extensions to impersonate legitimate ones for password managers, crypto wallets and more.

SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk - Tech Startups

Palo Alto, Singapore, 6th March 2025, CyberNewsWire The post SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk first appeared on Tech Startups.

Malicious Chrome extensions can spoof password managers in new attack

A newly devised

Google users warned of ‘sneaky shapeshifting’ attack that raids bank and logins

GOOGLE users are being warned over a “sneaky” attack that lets criminals steal your passwords – and potentially your money too. It affects Google Chrome users, and uses clever tricks to keep you from spotting the problem. SquareX LabsThe scam could see dangerous malware posing as your password manager[/caption] Google has been warned about the attack by SquareX Labs, the security company that found it. The attack reportedly works using Google Ch…

Malicious Chrome Extensions Use AI Tools to Steal Credentials from Banking and Password Apps

A newly created polymorphic attack enables malicious Chrome extensions to enter other browser extensions. This could be crypto wallets, password managers, or any kind of banking application that steals sensitive information.This kind of attack was first spotted by SquareX Labs, which warned about the practicality and feasibility across the newest version for Chrome. As per researchers, they have a serious responsibility to disclose these types o…