“Dormant Colors”: Live Campaign With Over 1M Data Stealing Extensions Installed

By Nati Tal (Guardio Labs) — BadEx II

TL;DR

The “Dormant Colors” is yet another vast campaign of malicious extensions with millions of active installations worldwide, this time with a color-related theme and full of deception all through the chain. It starts with the trickery malvertising campaign, continues with a crafty novel way to side-load the real malicious code without anyone noticing (until now!), and finally with stealing not only your searches and browsing data, …

browser extension campaign colors cyber cybersecurity data data stealing dormant colors extensions live safe browsing stealing threat intelligence