A malicious Chrome extension campaign is targeting Meta advertisers with a new lure, 'Madgicx Plus,' impersonating an AI ad optimization platform. The extensions exploit broad permissions and bypass security controls to steal session tokens and harvest sensitive advertising data, demonstrating a continued evolution of social engineering tactics. This campaign highlights the risk of account takeover and data compromise within the advertising ecosystem.
Latest mentioned: 09-11
Earliest mentioned: 09-09