Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal ...

The findings raise questions over whether existing endpoint and network controls provide enough visibility into malicious ...

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

The update fixes a high-severity flaw in Chrome’s V8 engine, but Google has not revealed who is using it or whom they ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Google switches Chrome to a two-week release cycle. Version 153 fixes 230 security vulnerabilities, including one actively ...

Malicious Chrome and Edge extensions stole crypto, credentials, sessions, and browser data in a campaign active since early ...

PEEP Google Chrome extension steals login sessions and turns compromised Windows devices into remote backdoors.

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...

A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

Once installed, it can turn Google Chrome or Microsoft Edge into a persistent backdoor for stealing browser data, hijacking ...