writeups.xyz / Official extension spoofing attacks: when trusted add-ons are not so trusted

Submitter : c2a

Date: 19 May 2023

Bounty : undisclosed

Vulnerabilities :

• Extension Spoofing
• Account Takeover
• XSS

Programs :

• Undisclosed

Authors :

• Yesenia Trejo (@Yess_2021xD)

Link :
https://strike.sh/blog/official-extension-attacks