Cybersecurity firm Socket recently uncovered multiple malicious Chrome extensions targeted at enterprise HR and ERP platform users.

Here's what to look out for ...

You might not need your favorite extension ...

Chrome extensions called 'Phantom Shuttle' stole user data for years before Google removed them from the Chrome Web Store after researchers exposed the malicious tools.

Five fake Chrome extensions impersonate Workday and NetSuite to steal cookies, block admin controls, and hijack sessions for ...

Chrome, Firefox, and Edge users must remove the following browser extensions manually. They've been identified as malicious ...

Users of widely used HR and ERP platforms targeted with malicious extensions which were available in the Chrome Web Store ...

Malicious Chrome extensions posing as productivity tools were found stealing session tokens, blocking security controls, and ...

Threat actors ripped off a legitimate AI-powered Chrome extension in order to harvest ChatGPT and DeepSeek data before ...

These need to be uninstalled manually ...

Malicious Chrome extensions on the Chrome Web Store masquerading as productivity and security tools for enterprise HR and ERP ...

Two malicious Chrome extensions with over 900,000 downloads were exfiltrating browser data and conversations with ChatGPT and ...