Jaime Blasco
@jaimeblascob.bsky.social
Cofounder and CTO at Nudge Security. Ex-AlienVault. Talking about AI, Threat Intel, SaaS security
Uvoice (40k downloads) also compromised today using uvoice[.]live oaikpkmjciadfpddlpjjdapglcihgdle t.co/hGkxieETWj
VPNCity chrome extension also affected chromewebstore.google.com/detail/vpnci... more than 50k users. Using the vpncity[.]live domain
Regarding the Cyberhaven chrome extension compromise I have reasons to believe there are other extensions affected. Pivoting by the ip address there are more domains created within the same time range resolving to the same ip address as cyberhavenext[.]pro (cont)