Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake Chrome VPN Extensions: 737 Malicious Add-Ons Routing Traffic Through Attacker SOCKS5 Proxies — Detection and Removal Guide
Introduction Researchers have uncovered a coordinated campaign of more than 737 browser extensions published to the Chrome Web Store that im...
737 Malicious Chrome VPN Extensions Caught Proxying User Traffic — Detection, Hunting, and Removal Guide
Introduction A newly disclosed campaign has put a hard number on a problem many of us in IR have been quietly tracking for years: 737 free V...
Critical Supply Chain Risk: 'Adblock for YouTube' Extension with Dormant Script Injection Capabilities
Introduction A significant supply chain threat has emerged targeting the browser ecosystem. Security researchers at Island have analyzed a p...
Multi-Vector Credential Heist: NWHStealer, notnullOSX, and Chrome Extension Botnets — OTX Pulse Analysis
Multi-Vector Credential Heist: NWHStealer, notnullOSX, and Chrome Extension Botnets Date: 2026-04-17 Analyst: Security Arsenal Threat Intell...
NWHStealer, notnullOSX, & Chrome Extension Botnets: OTX Pulse Analysis — Credential Theft Campaign
NWHStealer, notnullOSX, & Chrome Extension Botnets: OTX Pulse Analysis — Credential Theft Campaign Threat Summary A coordinated wave of cred...
Multi-Platform Infostealer Surge: OtterCookie npm Supply Chain, NWHStealer, and Chrome Extension Session Hijacking
Intelligence Briefing: Multi-Platform Credential Theft Campaigns Date: 2026-04-15 Category: Infostealer & Credential Theft Threat Summary Re...
Defending Against GlassWorm: Mitigating Solana Dead Drops and Chrome Extension RATs
Defending Against GlassWorm: Mitigating Solana Dead Drops and Chrome Extension RATs Cybersecurity adversaries continuously refine their tact...
Malicious Chrome Extensions Hijacked: Code Injection and Data Theft Risks
Malicious Chrome Extensions Hijacked: Code Injection and Data Theft Risks In a troubling trend highlighting the fragility of the software su...
Compromised QuickLens Extension Hijacked to Deliver Crypto-Stealing Malware via ClickFix
In the modern digital landscape, browser extensions have become indispensable tools for productivity. However, their deep integration into o...