that its browser extension had been injected with malicious code. It now appears that at least 35 companies had their Chrome extensions replaced with malware versions. Here’s everything you need to know about the 2FA bypass hack attacks as new information has emerged.Hackers don’t take holidays: this should be a mantra for all users and defenders when it comes to cybersecurity protection.
An analysis of the indicators of compromise for these attacks, Bill Toulas, a reporter at Bleeping Computer, said, “showed that the attackers were after the Facebook accounts of users of the poisoned extensions.” It would appear that a mouse click event listener was specifically looking for QR code images related to Facebook’s 2FA mechanisms.