Credential-stealing Chrome extensions target enterprise HR platforms - BleepingComputer

Google News1/17/2026 – 1/19/2026

Summary

Malicious Chrome extensions have been identified that target enterprise HR platforms, specifically impersonating Workday and NetSuite to hijack accounts. The GhostPoster browser extensions have been found with 840,000 installs and have been hidden for five years. LayerX uncovered this widespread browser extension malware.

Share:XRedditLinkedIn

Advertisement

Lindy Score Breakdown (V4.2)

55d
Age
1
Sources
from cluster
1289
Hours Since Seen
Final Score0/100
CategoryAntiLindy
StatusArchived
Recency Multiplier0% (0.5^1289/48)
Hero EligibleNo
Score is 0 because recency decay (0.5^1289/48 = 0.000000) reduced it below 0.5

Score BreakdownRisk 50

Source Reputation: Low-trust source (6/20 pts)
Consensus: Single source - no independent confirmation yet
Age: 55 days - proven survivor

Stories gain Lindy status through source reputation, network consensus, and time survival.

Breaking Similar stories

Anti-Lindy Similar stories