Google Chrome extensions hack may have started much earlier than expected

• New details have emerged regarding recent cyberattack
• A malicious Google Chrome extension led to 400,000 users being infected with malware
• Attackers were reportedly planning the campaign as early as March 2024

The recent cyberattack which hit security firm Cyberhaven and then affected a number of Google Chrome extenions may have been part of a ‘wider campaign’, new research has claimed.

A BleepingComputer investigation found the same code was injected into at least 35 Google Chrome extensions, which are being used by roughly 2.6 million users worldwide. This led to 400,000 devices being infected with malicious code through the CyberHaven extensions.