Polymorphic Extensions: The Sneaky Extension That Can Impersonate Any Browser Extension
- Heighten CORE Member
- Mar 18
- 2 min read
Original Blog Source: https://labs.sqrx.com/polymorphic-extensions-dd2310006e04
SquareX discovers polymorphic etensions that can morph infostealers into any internet browser extension. Watch out...password Managers and wallets are at risk.
Imagine that your AI transcriber tool shapeshifts into your password manager, then your crypto wallet and finally into your banking app — all without your knowledge. This is exactly what polymorphic extensions can do. The SquareX’s research team discovered a way for malicious extensions to silently impersonate any extension installed on the victim’s browser.
How does it work? The polymorphic extensions create a pixel perfect replica of the target’s icon, HTML popup, workflows and even temporarily disables the legitimate extension, making it extremely convincing for victims to believe that they are providing credentials to the real extension. These credentials can then be used by attackers to access all the sensitive information, credentials and financial assets stored in the victim’s account.
Considering these concerns, we recommend that you follow a few simple guidelines:
Only install known, trustworthy extensions
e.g., Dashlane, Bitwarden, 1Password, or TRUSTWORTHY privacy tools like EFF Privacy Badger
Less scrupulous adblockers may report every site you visit back to the sponsor company for ad-monitoring metrics (which may result in a violation of your privacy!)
Be aware of browser extensions and what they can access. A browser extension can effectively access EVERYTHING on any tab it has access to (which is likely all of them), including session cookies, as well as page content. This includes things that are pre-loaded in your browser but not yet displayed (mail inboxes, etc.)
Do NOT install unknown, unreviewed, or unsolicited browser extensions.
If you're ever unsure about an extension or need advice, don't hesitate to reach out to your security team
At Heighten we take a no-nonsense approach to information security, delivering effective solutions tailored to your needs. We focus on right-sized solutions that balance strong security with practicality, ensuring that your operations stay efficient and protected. With continuous monitoring, incident response planning, and regular audits, we empower your organization to confidently navigate the evolving threat landscape. Providing the highest level of managed security services we can confidently ensure your organization and its most valuable assets are protected- indefinitely.
Elevate your cybersecurity by having a conversation with one of our experts. We are ready to help you take your security from vulnerable to relentless.
Comments