Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Browser Data Theft: Exploiting Extension APIs by Malicious Websites

Jan 20, 2019 •

Anthony Pell

1 min read

Topics Covered

user privacy data theft browser exploit malicious websites extension APIs

Malicious websites can exploit browser extension APIs to execute code inside the browser and steal sensitive information such as bookmarks, browsing history, and even user cookies. The latter, an attacker can use to hijack a user's active login sessions and access sensitive accounts, such as email inboxes, social media profiles, or work-related accounts.

The link for this article located at ZDNet is no longer available.