RUTHLESS Chrome Plugins Secretly Pillage Corporate Login Crate in GLOBAL Heist

THEY ARE INSIDE YOUR BROWSER, WATCHING YOU. Cybersecurity experts have BLASTED Google for allowing a NIGHTMARE scenario to fester in its official Chrome Web Store – a network of FAKE extensions that are not just stealing your data but COMPLETELY SEIZING CONTROL of your digital life. These extensions, posing as helpful HR and business tools like Workday and SAP, are a TROJAN HORSE with ONE GOAL: to lock you out of your own accounts forever.

This is a SYSTEMIC FAILURE of epic proportions. The malicious add-ons, with innocuous names like “DataByCloud Access,” were DOWNLOADED by unsuspecting victims directly from Google’s OWN marketplace. Once installed, they perform a SILENT COUP: stealing session cookies to bypass ALL passwords and two-factor authentication, while simultaneously BLOCKING users from accessing security settings to fight back. It’s the digital equivalent of having your house keys stolen while the locks are changed in front of you.

Google’s weak response? The extensions are “no longer available” on their store. But the DAMAGE IS DONE, and the malware STILL LURKS on third-party sites. This isn’t a simple hack; it’s a PERMANENT ACCOUNT HIJACKING engineered to be UNDETECTABLE and IRREVERSIBLE. Security teams are rendered POWERLESS as victims are methodically locked out of their own financial, professional, and personal worlds.

Every click you’ve made, every login you’ve trusted, may have been for NOTHING. The question is no longer IF you are safe, but for HOW LONG you have already been a ghost in your own digital tomb.