Malicious Chrome Extensions Campaign Exposes User Data (infosecurity-magazine.com)

• 108 extensions with shared C2 infrastructure
• Theft of session cookies and Google account data
• Ad injection without user consent

"108 malicious Chrome extensions steal sessions, Google data, and inject ads via a single C2 infrastructure. The campaign highlights coordinated cybercrime with significant privacy risks."