Hackers Launch a Supply Chain Attack by Injecting Malicious Code into Hijacked Chrome Extensions - CPO Magazine
This CPO Magazine article, published January 9, 2025, covers a supply chain attack that injected malicious code into over 35 hijacked Chrome extensions to take over Facebook Ad accounts. Casey Ellis, founder of Bugcrowd, warns that because Cyberhaven's Chrome extension counts enterprise and business users as regular users, a compromise could affect business accounts.
Source description, as published
Over 2.6 million people may have been affected by a massive supply chain attack leveraging over 35 compromised Chrome extensions to take over Facebook Ad accounts.
Inventors / authors: Alicia Hope