Back to today’s briefing

Story perspectives

Supply Chain Attack Targets Chrome Extensions, Millions at Risk

1/24/2025

22 3

Summary

Story summary

A sophisticated supply chain attack has emerged, targeting Chrome extension developers and potentially impacting millions of users. Cybersecurity experts at Sekoia revealed that attackers masqueraded as Google support to phish sensitive data, including API keys. Users are urged to update or uninstall compromised extensions and reset their passwords, as many have already been removed from the Chrome Web Store.

1 of 1

Story summary

A sophisticated supply chain attack has emerged, targeting Chrome extension developers and potentially impacting millions of users. Cybersecurity experts at Sekoia revealed that attackers masqueraded as Google support to phish sensitive data, including API keys. Users are urged to update or uninstall compromised extensions and reset their passwords, as many have already been removed from the Chrome Web Store.