[Stanley]

Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing Hist

Cybersecurity researchers have discovered a malicious Google Chrome extension that's designed to steal data associated with Meta Business Suite and Facebook Business Manager.
The extension, named CL Suite by @CLMasters (ID: jkphinfhmfkckkcnifhjiplhfoiefffl), is marketed as a way to scrape Meta Business Suite data, remove verification pop-ups, and generate two-factor authentication (2FA) codes.

https://thehackernews.com/2026/02/malici...aught.html

[Au Jus Demon]

This happens a lot with Chrome extensions. Someone makes a popular extension people use, then later sells it to whoever.

[Charlie Sheen]

I have seriously scaled back my use of extensions lately for this exact reason.

[Jamika]

There should be some kind of oversight over these plugins, and they should be thoroughly reviewed.

[shakur123]

If an extension promises to “remove verification pop-ups” and generate 2FA codes for you… that’s not a feature, that’s a confession.

People will install anything if it says “growth hack” — even if it quietly steals the entire business behind it.