Microsoft dismantles StegoAd campaign using malicious Edge extensions
Microsoft has dismantled the 'StegoAd' campaign, which used malicious Edge extensions to perform ad fraud and credential theft. The operation utilized steganography to hide malicious code within images and fonts to evade detection.
Why it matters
This highlights the ongoing threat of supply chain attacks and malicious browser extensions targeting millions of users.
Microsoft has successfully dismantled the StegoAd campaign, a sophisticated operation that utilized 119 malicious Edge extensions to achieve approximately 2.6 million installs over a two-year period. The threat actor behind this campaign has been active since 2021, employing advanced techniques to evade detection, based on information published by Security Affairs.
The article provides a factual account of a cybersecurity operation.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in