Security · 2h ago
Microsoft removes 119 malicious Edge extensions with 2.6M downloads
Microsoft took down 119 malicious Edge extensions that hid malware in images and fonts. The extensions were downloaded 2.6 million times since 2021. The campaign targeted users with ad fraud and credential theft.
Meridian48 take
The scale of this campaign underscores how browser extensions remain a weak point in supply chain security, even after Microsoft's own storefront vetting.
Read the full reporting
Microsoft takes down over 100 malicious Edge extensions hiding malware in images and fonts →
TechRadar
malicious-extensionsedge-security