Google Removes 108 Malicious Chrome Extensions That Stole User Data

Google removed 108 malicious Chrome browser extensions from the Chrome Web Store after discovering they were stealing user credentials and browsing history.

The extensions affected approximately 20,000 users before Google identified and pulled them. The company did not disclose how long the extensions had been available or how they passed initial review.

The malicious extensions were designed to look like legitimate tools, such as productivity apps or ad blockers. Once installed, they collected login credentials and browsing data and sent it to external servers.

Google said it has notified affected users and is working to improve its review process for extensions submitted to the Chrome Web Store. The company also removed the developer accounts associated with the malicious extensions.

Security researchers have long warned that browser extensions represent a significant attack surface. Unlike apps on mobile platforms, browser extensions often request broad permissions that give them access to sensitive data.

Users are advised to review their installed extensions, remove any they do not recognize or no longer use, and check for unusual account activity.