The group of hackers has targeted multiple Chrome browser extensions in a string of targeted attacks that have been going on since mid-December. California-based data protection firm Cyberhaven confirmed the breach in a statement on Friday, indicating that their Chrome extension was compromised during the attack.
The firm says cyber experts who analyzed this describe it as part of a broader campaign aimed at Chrome extension developers across different sectors. Cyberhaven said it can confirm that a malicious cyberattack occurred on Christmas Eve affecting its Chrome extension, and it is working closely with federal law enforcement in investigating the breach.
It is unclear to what extent these attacks occurred, but the incident has alarmed the cybersecurity community. Browsers have extensions, commonly used to enhance the experience of browsing. They help apply discounts or manage web-based workflows. The case with Cyberhaven is an extension tool designed to monitor and secure client data within web applications.
Cyberheaven is not the only attacked platform, hackers target multiple Chrome browser extensions
Jaime Blasco, co-founder of Texas-based Nudge Security, points out that Cyberhaven is not the only one attacked. He identified other Chrome extensions that have been breached, some since mid-December. The list includes those that are artificial intelligence-based and VPN-related. Attacks seem opportunistic, where attackers are looking to scoop up as much sensitive information as possible from compromised sources.
“This does not seem to be attacking a specific company like Cyberhaven,” Blasco stated. “It looks more like an attempt to generally exploit multiple extensions and scrape data.”
The hacks put into the limelight the weakness of browser extensions, on which millions rely for everyday tasks and productivity. Experts warn companies and users to monitor their extensions, only pick those from trusted sources, and keep them updated to help reduce possible risks.
Also, see: Epic Games Store Offer Hot wheels Unleashed for Free in Holiday Giveaway