Malicious Chrome Web Store extensions caught stealing user data
By September 1, 2026, multiple extensions available in the official Chrome Web Store and Microsoft Edge extension stores were discovered delivering a malware framework that stole cryptocurrency, browser history, sensitive user data, and injected malicious advertising. The discovery raised questions about the effectiveness of app store security reviews.