105K Chrome Installs Linked to Adware and Fake Google Traffic
2026-06-18T08:51:56Z•88b1996daffd3fb6b995c8acb5c1d4383f719e550e47e98a411ffd0a10be16a0
AI securityBitLocker bypassCISAChrome extensionsNSOPatch TuesdayPeopleSoftQilinSalesforce breachShinyHuntersVPNaccount recovery flawad fraudadwaredata breachexploited vulnerabilityextortionransomwarezero-day
What happened
Multiple high-impact security incidents and vulnerabilities reported across enterprise and consumer services. Socket researchers linked 152 malicious Chrome wallpaper extensions (≈105K installs) to hidden data logging, fake Google search traffic and ad monetization. Major data-exfiltration/extortion incidents include Novo Nordisk (claimed 1.3TB stolen, $25M demand), ShinyHunters’ claimed 297GB Council of Europe haul, Nintendo alleged extortion, Infinite Campus/Salesforce exposure of ~137K staff records, Meta Instagram account-recovery bug impacting ~20K accounts, and the regulatory fallout of
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- techrepublic_security
- Record identifier
- 88b1996daffd3fb6b995c8acb5c1d4383f719e550e47e98a411ffd0a10be16a0
- Enrichment time
- 2026-06-18T08:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.