Story perspectives

4.3 Million Users Targeted in Chrome and Edge Spyware Attack

12/12/2025

42 8

Summary

Story summary

ShadyPanda is a malware campaign that compromised 4.3 million users by turning trusted Chrome and Edge extensions into spyware.
Koi Security's report shows these extensions received silent updates over five years, enabling tracking and data theft.
Users should check installed extensions and remove suspicious ones, especially those resembling wallpaper or productivity tools.
For security, reset passwords, consider data removal services, and install strong antivirus software.

1 of 1

Story summary

ShadyPanda is a malware campaign that compromised 4.3 million users by turning trusted Chrome and Edge extensions into spyware.
Koi Security's report shows these extensions received silent updates over five years, enabling tracking and data theft.
Users should check installed extensions and remove suspicious ones, especially those resembling wallpaper or productivity tools.
For security, reset passwords, consider data removal services, and install strong antivirus software.