The Silent Risk in Your Browser: Detecting Malicious Extensions - Gherardo Buio Fiori

Browser extensions are used by millions of users and professionals inside of organizations, some for small tasks and others for more complex tasks and yet it's often ignored when it comes to security. Majority of organisations put all focus on the major points of infrastructure and overlook browser extensions. Millions of users are affected every year by malicious browser extensions, as most of the times it is the trusted ones that turn malicious after a developer gets compromised or the extension was sold. I will dive into the behaviour of known malicious extensions and best practices when it comes to handling browser extensions. Get ready to learn about behaviours you probably did not know was possible.