rotating globe
16 Apr 2026


Malicious Chrome extensions hits 20,000 users

108 add-ons found stealing data and injecting ads despite appearing as harmless tools

More than 20,000 Chrome users may have been exposed to a large-scale cyber threat involving over 100 malicious browser extensions, according to a recent cybersecurity report.

These extensions were cleverly disguised as useful applications, including entertainment tools and browser utilities, which helped them gain user trust. Once installed, they quietly began collecting data such as browsing habits and account-related information.

Researchers found that the extensions could also take control of browsing sessions, inject unwanted ads, and interact with certain online platforms without the user’s knowledge.

The operation appears to be organised, as all the extensions were connected to a common control system, allowing attackers to manage them remotely.

Another concern is that the extensions were spread across multiple developer accounts, making them harder to detect and remove quickly.

Experts warn that browser extensions often have deep access to user data, making them a potential security risk if misused. Users are advised to review permissions carefully and regularly clean up unused or suspicious extensions.

Also Read: IMF cuts global growth, India at 6.5%