CyberSIXT Search
Original
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

Part of the ShadyPanda story · 3 articles · 2 outlets · since 1 Dec 2025

The article discusses the emergence of ShadyPanda, a group that has transformed popular browser extensions with over 4.3 million installs into spyware. This development raises significant concerns about user privacy and security, as these extensions were previously trusted tools. The article emphasizes the importance of vigilance in cybersecurity, particularly regarding browser extensions, which are often overlooked as potential threats.

It also highlights the need for users to be aware of the risks associated with third-party extensions and to regularly review their installed applications for any suspicious activity.

Story timeline ShadyPanda

Full timeline
Show as table
ShadyPanda coverage
Published (UTC)OutletHeadline
Mon 1 Dec 2025 · 18:30 UTCThe Hacker NewsShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware (this article)
Wed 3 Dec 2025 · 22:55 UTCDark Reading'ShadyPanda' Hackers Weaponize Millions of Browsers
Mon 15 Dec 2025 · 13:10 UTCThe Hacker NewsA Browser Extension Risk Guide After the ShadyPanda Campaign

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device