Google Removes 131 Malicious Chrome Extensions Hijacking WhatsApp Web

Cybersecurity researchers uncovered a coordinated campaign involving 131 rebranded Chrome extensions that hijack WhatsApp Web to automate spam messaging and bypass platform anti-spam measures, primarily targeting Brazilian users. These extensions, linked to a franchise model by DBX Tecnologia, have been used for at least nine months to facilitate bulk outreach and sales automation, violating Google's policies and raising concerns about widespread abuse and potential malware distribution.