Workday, NetSuite and SuccessFactors sessions targeted by malicious Chrome extensions
Overview
Researchers have discovered five malicious Chrome extensions designed to target users of Workday, NetSuite, and SuccessFactors. These extensions are capable of stealing cookies and preventing access to critical security pages on these platforms. This poses a significant risk to organizations that rely on these software solutions for their operations, as attackers can gain unauthorized access to sensitive information. Users of these platforms should be particularly vigilant about the extensions they install and ensure they are using only trusted sources. The presence of such malicious tools illustrates the ongoing challenges of keeping enterprise software environments secure.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Workday, NetSuite, SuccessFactors
- Action Required: Users should uninstall any suspicious Chrome extensions and regularly monitor their browser for unauthorized additions.
- Timeline: Newly disclosed
Original Article Summary
Five related extensions were found to steal cookies and block platform security pages.
Impact
Workday, NetSuite, SuccessFactors
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Newly disclosed
Remediation
Users should uninstall any suspicious Chrome extensions and regularly monitor their browser for unauthorized additions. Additionally, organizations should educate employees about the risks of installing unverified extensions.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Critical, Google, Malware.