Trusted Chrome, Edge extensions weaponized in supply chain campaign

Attackers have turned previously legitimate browser extensions into malware after acquiring them from legitimate publishers, potentially allowing malicious updates to reach users who had installed the software when it was still safe, researchers at Socket have found. The campaign involved 19 extensions for Google Chrome and Microsoft Edge. Five had originally been developed by legitimate publishers and were later acquired by the attackers, according to Socket.