Cyberhaven’s Chrome extension security incident and what we’re …
Dec 27, 2024 · For customers running version 24.10.4 of our Chrome extension during the affected period (December 24-26, 2024), we strongly recommend: Confirm if you have any browsers running the Cyberhaven Chrome extension version 24.10.4 and force an update to version 24.10.5 (currently available in the Chrome Web Store) or newer.
Cyberhaven’s preliminary analysis of the recent malicious Chrome …
Dec 28, 2024 · This malicious extension (24.10.4) was essentially based on a clean prior version of the official Cyberhaven Chrome extension. The attacker made a copy of the clean extension and added some malicious code to create a new malicious extension. This extension was uploaded to the Chrome webstore and replaced the clean official Cyberhaven Chrome ...
Time to check if you ran any of these 33 malicious Chrome …
3 days ago · Chrome browsers actively running Cyberhaven during that window would automatically download and install the malicious code. Cyberhaven responded by issuing version 24.10.5, and 24.10.6 a few days ...
Cyberhaven Chrome Extension Hacked to Inject Malicious Scripts
Dec 27, 2024 · Cyberhaven confirmed that versions of the extension hosted outside the Chrome Web Store, such as those for Firefox or Edge, were not affected. Cyberhaven has engaged federal law enforcement and cybersecurity firm Mandiant to investigate the breach further.
Dozens of Chrome Extensions Hacked, Exposing Millions ... - The Hacker News
Dec 29, 2024 · On December 27, Cyberhaven disclosed that a threat actor compromised its browser extension and injected malicious code to communicate with an external command-and-control (C&C) server located on the domain cyberhavenext [.]pro, download additional configuration files, and exfiltrate user data.
New details reveal how hackers hijacked 35 Google Chrome …
5 days ago · New details have emerged about a phishing campaign targeting Chrome browser extension developers that led to the compromise of at least thirty-five extensions to inject data-stealing code,...
Cyber firm’s Chrome extension hijacked to steal user passwords
Dec 27, 2024 · Data-loss prevention startup Cyberhaven says hackers published a malicious update to its Chrome extension that was capable of stealing customer passwords and session tokens, according to an email ...
Cybersecurity firm's Chrome extension hijacked to steal users' data
Dec 27, 2024 · One attack was disclosed by Cyberhaven, a data loss prevention company that alerted its customers of a breach on December 24 after a successful phishing attack on an administrator account for the...
Cyberhaven releases open source tools to detect broad-based Chrome …
To enable our customers and other organizations that could be affected by this attack on Chrome extensions to run their own investigations for this attack, we are releasing a suite of scripts. These scripts search for entries indicating that a malicious extension has exfiltrated data.
Google Chrome Users Beware This Holiday Season: Cyber
Dec 28, 2024 · Cyberhaven, a data-loss prevention startup, has confirmed a security breach involving its Google Chrome browser extension. Hackers managed to release a malicious update capable of stealing user...
- Some results have been removed