Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain. The attack typically begins when a victim downloads a business-themed ZIP ...

Google delisted the image conversion tool earlier this month, but not before it had likely been modifying thousands of users' ...

An extension I used almost every day was bought by a new owner and loaded up with spyware. It happened in 2024, but Google ...

This is where the popular Chrome extension Save Image as Type comes in (or used to come in). With over a million users at its ...

Do you use the Chrome extension "Save image as Type?" If so, you are one of more than one million users who woke up this morning to find out that Google has disabled the extension in your Chrome web ...

This simple script tamed my Downloads folder.

IntroductionOn March 1, 2026, ThreatLabz observed new activity from a China-nexus threat actor targeting countries in the Persian Gulf region. The activity took place within the first 24 hours of the ...

Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.

Malicious Chrome extensions tied to ownership transfers push malware and steal data, exposing thousands to credential theft and system compromise.

Distributed through over 100 GitHub repositories, the BoryptGrab stealer targets browser, wallet, system, and other user data ...

A compromised Chrome extension with 7,000 users was updated to deploy malware, strip security headers, and steal cryptocurrency wallet seed phrases.