Malicious Chrome Extensions Can Spoof Password Managers in New Attack
Malicious Chrome extensions can now emulate legitimate ones, like password managers, to steal sensitive user data. By exploiting Chrome's ‘chrome.management' API or injecting scripts, these extensions can identify installed extensions and disguise themselves. They trick users into entering credentials via fake prompts. SquareX Labs has illustrated this threat, urging Chrome to take preventative measures, as current protections are inadequate.
