A threat group dubbed ShadyPanda exploited traditional extension processes in browser marketplaces by uploading legitimate extensions and then quietly weaponization them with malicious updates, infecting 4.3 million Chrome and Edge users with RCE malware and spyware.

The post ShadyPanda’s Years-Long Browser Hack Infected 4.3 Million Users appeared first on Security Boulevard.

Jeffrey Burt

Source: Security Boulevard
Source Link: https://securityboulevard.com/2025/12/shadypandas-years-long-browser-hack-infected-4-3-million-users/