Trusted Chrome, Edge extensions weaponized in supply chain campaign
The campaign was heavily focused on cryptocurrency theft, but its capabilities went further. Socket observed code that captured information typed into web forms and extracted authentication material from active browser…