NewsPublished 14 Feb 2026

Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data

Source SecurityWeek

Description

With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft. The post Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data appeared first on SecurityWeek .

Impact

For European organizations, the impact includes potential leakage of sensitive corporate and personal data through compromised employee browsers. This can lead to privacy violations under GDPR, reputational damage, and potential financial losses from data breaches. The widespread use of Chrome in Europe means many organizations could be unknowingly exposed if employees install these malicious extensions. Data theft could facilitate further attacks such as credential stuffing, phishing, or corporate espionage. Additionally, tracking and profiling of users could violate privacy regulations, leading to legal penalties. The threat also risks undermining trust in browser-based workflows and cloud services accessed via browsers. Organizations with remote or hybrid workforces are particularly vulnerable due to less controlled endpoint environments. Overall, the threat could disrupt confidentiality and integrity of organizational data and user privacy.

Defensive guidance

Organizations should implement strict browser extension policies, allowing only vetted and approved extensions through enterprise management tools like Google Workspace Admin Console or Microsoft Endpoint Manager. Employ endpoint security solutions capable of detecting and blocking malicious extensions. Conduct regular audits of installed browser extensions on corporate devices. Educate employees about the risks of installing unverified extensions and encourage use of official extension stores with caution. Use browser security features such as site isolation and permissions management to limit extension capabilities. Monitor network traffic for unusual data exfiltration patterns that could indicate malicious extension activity. Consider deploying browser isolation or sandboxing technologies to reduce risk exposure. Finally, maintain up-to-date threat intelligence feeds to quickly identify and respond to newly discovered malicious extensions.

References

securityweek.com/over-300-malicious-chrome-extensions-caught-leaking-or-stealing-user-data/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 14 Feb 2026, 12:03 UTC

References

Community reviews