
- Russian hackers sell Chrome extension service that bypasses Google Store moderation
- Malicious add-on spoofs legitimate sites with full-screen iframes to steal credentials
- Varonis advises strict enterprise allowlisting and consumer extension audits for protection
Russian hackers are selling a service that allows other criminals to spoof legitimate websites, tricking victims into exposing login credentials, or possibly even making fraudulent wire transfers.