Optional@lemmy.world to Technology@lemmy.worldEnglish · 9 months ago4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign | Koi Blogwww.koi.aiexternal-linkmessage-square2linkfedilinkarrow-up124arrow-down11file-text
arrow-up123arrow-down1external-link4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign | Koi Blogwww.koi.aiOptional@lemmy.world to Technology@lemmy.worldEnglish · 9 months agomessage-square2linkfedilinkfile-text
minus-squareearthworm@sh.itjust.workslinkfedilinkEnglisharrow-up18·9 months agoTL;Dr: Browser extensions are malware sleeper agents. The systemic problem isn’t just one malicious actor. It’s that the security model incentivizes this behavior: Build something legitimate Pass review and gain trust signals (installs, reviews, verified badges) Collect large user base Weaponize via update Profit before detection ShadyPanda proved this works. And now every sophisticated threat actor knows the playbook.
TL;Dr: Browser extensions are malware sleeper agents.