
Unmasked: 108 Chrome Extensions Leak Google and Telegram Data
Security researchers found 108 Chrome extensions (published by five developers but controlled by a single operator) that steal Google account data and Telegram messages, with about 20,000 installations. The extensions can backdoor URLs, inject HTML, and exfiltrate Telegram Web sessions every 15 seconds, while some also capture Google sign‑in credentials and translate tools that reveal user emails. Users should audit installed extensions, log out of Telegram Web sessions, review third‑party app permissions, and avoid dubious extension listings.








