Browser Extension Security Risks

Browser extensions have extensive access to user data.

Extension Risks

- Data exfiltration
- Credential theft
- Session hijacking
- Cryptomining
- Ad injection

Notable Incidents

- DataSpii: Millions of users
- The Great Suspender: Sold to malicious actor
- Nano Adblocker: Injected malware
- PDF Toolbox: Data theft

Protection

- Minimize extensions
- Review permissions carefully
- Use enterprise policies
- Regular audits
- Extension allowlisting