WaSteal is a malicious campaign involving Chrome browser extensions that exfiltrate user data. An update from threat researchers using infrastructure pivoting techniques uncovered 57 more extensions tied to the same operator, increasing the total number of malicious extensions to 183. All identified extensions remain live on the Chrome Web Store, indicating ongoing exposure. The campaign uses a consistent backend and exfiltration method across all extensions. The information is sourced from a Reddit cybersecurity post linking to detailed external reports but lacks specific technical exploit details or patch information.

Users who install any of the 183 malicious Chrome extensions risk data exfiltration to the attacker's backend. The extensions are actively live on the Chrome Web Store, enabling continued victimization. There is no indication of exploitation in the wild beyond the campaign's presence, and no vendor advisory or patch information is available. The impact is primarily on user privacy and data security due to unauthorized data exfiltration.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should avoid installing suspicious or unverified Chrome extensions, and organizations should monitor for these extensions in their environments. Since no official fix or removal by the vendor is mentioned, manual removal of these extensions and user awareness are recommended mitigation steps.