I seriously don't get it. I remember in some other topic about rogue extensions we discussed about the capabilities that extensions have, but if I understood correctly any extension can hijack or steal cookies? How is this not fixed yet by the big browser developers, or am I missing something? https://www.bleepingcomputer.com/ne...ed-by-new-malicious-chatgpt-chrome-extension/
Here is another malicious extension with 2FA bypassing capabilities. This extension was however installed by malware and not available directly via the Chrome Webstore. https://www.bleepingcomputer.com/ne...browser-extension-to-bypass-2fa-steal-crypto/
