1.6 Million combined installs famous extension ModHeader - Modify HTTP headers removed for Malware
The ModHeader browser extension, widely installed with approximately 1.6 million combined installs on Chrome and Edge, has been flagged and removed due to malware concerns. Microsoft removed the extension from the Edge store on July 3, 2026, and Google has flagged it as malware. The detection is based on aggregated threat intelligence from multiple sources, including community reports and security researchers. No specific technical details about the malware behavior or exploitation methods are provided. There is no confirmed exploit in the wild reported at this time.
AI Analysis
Technical Summary
ModHeader, a popular HTTP header modification extension with around 900,000 installs on Chrome and 700,000 on Edge, was identified as malware by multiple threat intelligence sources aggregated by MalExt Sentry. Microsoft proactively removed the extension from the Edge store, and Google flagged it as malware, indicating policy violations or malicious behavior. The threat intelligence is community-driven and continuously updated, but no detailed technical analysis or specific vulnerability exploitation information is provided. The extension IDs are known and tracked for blocking and detection purposes.
Potential Impact
Users of the ModHeader extension on Chrome and Edge risk exposure to malware through this extension. The exact impact or malicious capabilities are not detailed, but the removal and flagging by major vendors indicate a significant security risk. There are no reports of active exploitation in the wild at this time.
Mitigation Recommendations
The extension has been removed from the Microsoft Edge store and flagged by Google, indicating vendor action to mitigate risk. Users should uninstall the ModHeader extension immediately if installed. Check official browser extension stores and vendor advisories for updates or replacement guidance. No further specific mitigation steps are provided by the vendor or threat intelligence sources.
1.6 Million combined installs famous extension ModHeader - Modify HTTP headers removed for Malware
Description
The ModHeader browser extension, widely installed with approximately 1.6 million combined installs on Chrome and Edge, has been flagged and removed due to malware concerns. Microsoft removed the extension from the Edge store on July 3, 2026, and Google has flagged it as malware. The detection is based on aggregated threat intelligence from multiple sources, including community reports and security researchers. No specific technical details about the malware behavior or exploitation methods are provided. There is no confirmed exploit in the wild reported at this time.
Reddit Discussion
Google has flagged the widely-installed HTTP header editor ModHeader as malware
Microsoft already pulled it from Edge on July 3.
MalExt Sentry - Malicious Browser Extension Tracker
- 900k installs on chrome | idgpnmonknjnojddfkpgkljpfnnfcklj
- 700k installs on edge | opgbiafapkbbnbnjcdomjaghbckfkglc
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
ModHeader, a popular HTTP header modification extension with around 900,000 installs on Chrome and 700,000 on Edge, was identified as malware by multiple threat intelligence sources aggregated by MalExt Sentry. Microsoft proactively removed the extension from the Edge store, and Google flagged it as malware, indicating policy violations or malicious behavior. The threat intelligence is community-driven and continuously updated, but no detailed technical analysis or specific vulnerability exploitation information is provided. The extension IDs are known and tracked for blocking and detection purposes.
Potential Impact
Users of the ModHeader extension on Chrome and Edge risk exposure to malware through this extension. The exact impact or malicious capabilities are not detailed, but the removal and flagging by major vendors indicate a significant security risk. There are no reports of active exploitation in the wild at this time.
Mitigation Recommendations
The extension has been removed from the Microsoft Edge store and flagged by Google, indicating vendor action to mitigate risk. Users should uninstall the ModHeader extension immediately if installed. Check official browser extension stores and vendor advisories for updates or replacement guidance. No further specific mitigation steps are provided by the vendor or threat intelligence sources.
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Domain
- null
- Newsworthiness Assessment
- {"score":30,"reasons":["external_link","newsworthy_keywords:malware","established_author","very_recent"],"isNewsworthy":true,"foundNewsworthy":["malware"],"foundNonNewsworthy":[]}
- Has External Source
- true
- Trusted Domain
- false
Threat ID: 6a50b8a368715ace4355b276
Added to database: 07/10/2026, 09:17:23 UTC
Last enriched: 07/10/2026, 09:17:28 UTC
Last updated: 07/10/2026, 10:17:19 UTC
Views: 175
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.