
Security researchers at Koi have uncovered a massive, coordinated spyware campaign that spans 100+ Google Chrome, Microsoft Edge, and Mozilla FireFox extensions, which seem to function legitimately, but (eventually) exhibit malicious behavior tied to a threat actor called DarkSpectre. This behavior includes stripping security protections,