As cited
Copy frozen at (site build).
breaches incidents
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft removed ModHeader, a browser extension with approximately 1.6 million installations, after security researchers discovered a dormant data collector embedded in the official store version. The collector remained inactive due to an empty allowlist and showed no evidence of having transmitted any user browsing data.
Why it matters: Users of ModHeader on Chrome and Edge face potential privacy exposure if the extension's developer activates the collection mechanism in future updates; practitioners should audit installed extensions and verify legitimate functionality.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft removed ModHeader, a browser extension with approximately 1.6 million installations, after security researchers discovered a dormant data collector embedded in the official store version. The collector remained inactive due to an empty allowlist and showed no evidence of having transmitted any user browsing data.
Why it matters: Users of ModHeader on Chrome and Edge face potential privacy exposure if the extension's developer activates the collection mechanism in future updates; practitioners should audit installed extensions and verify legitimate functionality.
- Source published
- First seen by Cybersecurity Tracker