4.3 million have installed this malicious browser extension on Chrome and Edge – here’s how to check

• ShadyPanda campaign turned 145 Chrome/Edge extensions malicious after years of normal use
• Updates added affiliate fraud, cookie theft, search hijacking, and remote code execution
• 4.3M devices at risk; Google removed extensions, Microsoft slower to respond

More than a hundred browser extensions spread across Google Chrome and Microsoft Edge browsers turned malicious after five years of “normal” operation. The attackers were apparently playing the long con game – building trust for years before pulling the trigger on unsuspecting victims. Apparently, around 4.3 million devices are at risk.

This is according to security researchers Koi Security, who discovered the campaign it later dubbed : ShadyPanda.