Polymorphic Chrome Extensions Impersonate Password Managers to Steal Credentials
3 comments
·March 10, 2025Semaphor
Probably AI generated spam of the original [0]. And there
> 8. This triggers the polymorphic extension to:
> Temporarily disable 1Password, removing it from the pinned tab
Uhm. I guess temporarily disabling a completely different extension is left as an exercise to the reader?
> Furthermore, based on Chrome’s permission classification system, all the APIs used in this attack — namely activeTab, scripting and chrome.management are classified as medium risk. In fact, the very same permissions are commonly used by popular extensions such as page stylers, ad blockers and even password managers themselves.
One of those APIs is not like the other…
I guess they needed to come up with something to advertise their "Browser Detection and Response" product.
[0]: https://labs.sqrx.com/polymorphic-extensions-dd2310006e04
neuroelectron
Google would have to know this is possible, right?
Why extensions can disable other extensions, google boy? Weren’t you overconcerned with user security when pushing for mv3?
You can’t seriously talk security if you make such noob mistakes.