Hackers have targeted Google Chrome users in a frightening 2FA bypass attack—a full list of impacted extensions has now been published.

New details have emerged about a phishing campaign targeting Chrome browser extension developers that led to the compromise of at least thirty-five extensions to inject data-stealing code, including those from cybersecurity firm Cyberhaven.

The publishers of browser extensions on the Google Chrome Web Store were reportedly targeted via a phishing campaign.

The recent cyberattack which hit security firm Cyberhaven and then affected a number of Google Chrome extenions may have been part of a ‘wider campaign’, new research has claimed. A BleepingComputer investigation found the same code was injected into at least 35 Google Chrome extensions,

Criminals have hijacked dozens of popular browser extensions in a bid to target Google Chrome users and steal sensitive data, like passwords. The devastating campaign started last month and shows no sign of slowing.