Millions of users were unknowingly tracked in a 7‑year Chrome and Edge malware scheme — extensions turned into spyware

According to TheRegister, a user named ShadyPanda started publishing seemingly harmless browser extensions in 2018. For seven years, these extensions worked as expected, gaining the trust of many users. Once millions of people had installed them, the extensions were secretly updated to spy on users. Koi Security discovered this activity while monitoring how the extensions behaved and detailed their findings in a report.








