Story perspectives

Beware NexShield: Malicious Ad Blocker Crashes Browsers

2/16/2026

Summary

Story summary

NexShield is a malicious browser extension disguised as a privacy-friendly ad blocker that crashes browsers.
The extension is falsely attributed to uBlock Origin's developer.
It spread via online ads before removal from the Chrome Web Store.
It targets corporate networks and deploys ModeloRAT.
Experts warn that uninstalling NexShield may not remove all malicious components and advise installing only trusted extensions, avoiding unknown commands, and using strong antivirus.

1 of 1

Story summary

NexShield is a malicious browser extension disguised as a privacy-friendly ad blocker that crashes browsers.
The extension is falsely attributed to uBlock Origin's developer.
It spread via online ads before removal from the Chrome Web Store.
It targets corporate networks and deploys ModeloRAT.
Experts warn that uninstalling NexShield may not remove all malicious components and advise installing only trusted extensions, avoiding unknown commands, and using strong antivirus.