216.73.216.75

Cyber startup employee hacked to distribute malicious Chrome extension

· Published 27/12/2024 14:21 · Modified 30/12/2024 08:25

Export JSON

Essential information

Published
27/12/2024 14:21
Modified
30/12/2024 08:25
Tags
2024-12-27 browser extensions chrome cyberhaven
Related entities
1 observables, 5 techniques (mitre)

Description

Several extensions have been compromised, including those related to . The affected extensions are linked to multiple suspicious domains resolving to the same IP address as cyberhavenext[.]pro. Some confirmed compromised extensions are listed with their corresponding URLs. Users are advised to search for these extensions in their environments and monitor for any traffic to the IP address 149.28.124[.]84. This information suggests a widespread attack targeting , potentially putting users' data and privacy at risk.

External references