Malicious Chrome Extensions Hijack Workday, NetSuite Accounts

Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

• Researchers identified five malicious Chrome extensions impersonating popular business tools like Workday and NetSuite, designed to steal user credentials.
• These extensions used a technique to dynamically inject JavaScript into legitimate login pages, intercepting usernames, passwords, and multi-factor authentication codes.
• The campaign targeted corporate environments, aiming to gain unauthorized access to critical SaaS applications, highlighting the risk of supply chain attacks through browser add-ons.

Source: The Hacker News | Date: January 16, 2026

References

1. Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts - The Hacker News