
Research
Malicious Chrome Extensions βPhantom Shuttleβ Masquerade as a VPN to Intercept Traffic and Exfiltrate Credentials
Fake βPhantom Shuttleβ VPN Chrome extensions (active since 2017) hijack proxy auth to intercept traffic and continuously exfiltrate user credentials to attacker infrastructure.


