In an alarming cybersecurity breach, hackers compromised Chrome extensions of multiple companies, including Cyberhaven, to access sensitive data. The attack, ongoing since December, highlights vulnerabilities in browser extensions.
Hackers Target Chrome Extensions in December Campaign
According to Investing.com, an expert who has studied the campaign and one of the victims reported that hackers have been compromising the Chrome browser extensions of multiple companies since the middle of December.
The data protection business Cyberhaven, located in California, was one of the victims. Cyberhaven acknowledged the hack to Reuters on Friday.
"Cyberhaven can confirm that a malicious cyberattack occurred on Christmas Eve, affecting our Chrome extension," according to the announcement. Public remarks made by cybersecurity professionals were referenced. An investigation by Cyberhaven revealed that these remarks hinted at an assault that was "part of a wider campaign to target Chrome extension developers across a wide range of companies."
Cyberhaven Responds to Federal Investigations
According to Cyberhaven, "We are actively cooperating with federal law enforcement."
It was unclear at the moment how widespread the hacks were.
A common use case for browser extensions is the ability to automate the application of coupons to online shopping sites, among other customization options. For Cyberhaven, the Chrome plugin meant easier data monitoring and security across all of their clients' online apps.
Experts Link Hacks to Sensitive Data Theft
One of Nudge Security's cofounders, Jaime Blasco of Austin, Texas, claimed to have uncovered multiple more Chrome extensions compromised in a similar fashion to Cyberhaven's. In the middle of December, it seemed like at least one had been struck.
According to Blasco, extensions associated with virtual private networks and artificial intelligence were among the others that were impacted. According to him, that pointed to a malicious attempt to steal sensitive information by exploiting as many vulnerable extensions as feasible.
"I'm almost certain this is not targeted to Cyberhaven," added Blasco. "If I had to guess, this was just random."
Questions were directed to the companies implicated by the U.S. cyber watchdog CISA. Alphabet, the maker of the Chrome browser, did not immediately respond to a message requesting comment.


U.S. Stock Futures Edge Lower as Tech and AI Stocks Drag Wall Street Ahead of Key Earnings
TSMC Eyes 3nm Chip Production in Japan with $17 Billion Kumamoto Investment
Elon Musk’s Empire: SpaceX, Tesla, and xAI Merger Talks Spark Investor Debate
Trump Administration Sued Over Suspension of Critical Hudson River Tunnel Funding
U.S. Stock Futures Edge Higher as Tech Rout Deepens on AI Concerns and Earnings
SpaceX Reports $8 Billion Profit as IPO Plans and Starlink Growth Fuel Valuation Buzz
RBA Raises Interest Rates by 25 Basis Points as Inflation Pressures Persist
Jensen Huang Urges Taiwan Suppliers to Boost AI Chip Production Amid Surging Demand
SpaceX Updates Starlink Privacy Policy to Allow AI Training as xAI Merger Talks and IPO Loom
Nvidia Nears $20 Billion OpenAI Investment as AI Funding Race Intensifies
Trump Extends AGOA Trade Program for Africa Through 2026, Supporting Jobs and U.S.-Africa Trade
Asian Currencies Strengthen as Indian Rupee and Australian Dollar Rally
Sandisk Stock Soars After Blowout Earnings and AI-Driven Outlook
Australia’s December Trade Surplus Expands but Falls Short of Expectations
SoftBank and Intel Partner to Develop Next-Generation Memory Chips for AI Data Centers
Federal Judge Signals Possible Dismissal of xAI Lawsuit Against OpenAI
South Korea’s Weak Won Struggles as Retail Investors Pour Money Into U.S. Stocks 



