Cyberhaven Chrome Extension Compromised in Phishing Attack

According to Odaily, a phishing attack on December 24 led to the theft of Google Chrome Web Store credentials belonging to a Cyberhaven employee. The attackers used these credentials to release a malicious version of the company's Chrome extension, identified as version 24.10.4.