From a Sophisticated Browser-Extension Supply-Chain Compromise to a VibeCoded Twist: A Chrome Extension as the Initial Access Vector for a Broader Malware Chain (opens in new tab)

Feeds

✨ Discovered from this domain
ShotBird Extension Malware Report monxresearch-sec.github.io

Independent technical analysis of a Chrome extension compromise, fake update chain, and Windows-stage malware activity.

newest submissions : chrome reddit.com

Welcome to r/Chrome - an independent, community-run forum for everything to do with the Chrome browser!

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help