Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Summary
Google and Microsoft have removed the ModHeader browser extension, used by approximately 1.6 million users, due to the discovery of a hidden browsing history collector. Although this collector was dormant and there's no evidence of data exfiltration, its presence prompted the removal by the tech giants.
IFF Assessment
The discovery of a hidden data collector in a widely used browser extension poses a risk to user privacy and security, representing a threat to defenders.
Defender Context
This incident highlights the persistent risk of malicious code hidden within seemingly innocuous browser extensions. Defenders should be aware of such threats and advise users to exercise caution when installing extensions, regularly review their installed extensions, and be vigilant about potential data collection or unauthorized modifications.