⤷ Title: ShadyPanda Spyware Hacked 4.3 Million Users by Weaponizing Trusted Browser Extensions via Auto-Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 00:33:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #Auto_Update #browser extension #Chrome Web Store #Clean Master #RCE Backdoor #ShadyPanda #spyware #WeTab
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 00:33:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #Auto_Update #browser extension #Chrome Web Store #Clean Master #RCE Backdoor #ShadyPanda #spyware #WeTab
Daily CyberSecurity
ShadyPanda Spyware Hacked 4.3 Million Users by Weaponizing Trusted Browser Extensions via Auto-Updates
Koi Security exposed ShadyPanda, which infected 4.3M+ users by weaponizing trusted browser extensions (WeTab, Clean Master) through auto-updates. The malware performs RCE and exfiltrates data to China.