---
title: "Five Chrome extensions caught hijacking enterprise sessions"
url: https://daily.dev/posts/five-chrome-extensions-caught-hijacking-enterprise-sessions-tzyukdadm
source_url: https://www.csoonline.com/article/4118607/five-chrome-extensions-caught-hijacking-enterprise-sessions.html
type: article
source: "CSO Online"
published: 2026-01-19T11:42:46.605Z
updated: 2026-03-15T04:57:12.830Z
tags: ["authentication", "cyber", "devtools", "google-chrome", "security"]
reading_time: 3
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Five Chrome extensions caught hijacking enterprise sessions

**[CSO Online](https://daily.dev/sources/csoonline)** · 3 min read · 0 upvotes · 0 comments

## Summary

Five malicious Chrome extensions disguised as productivity tools were discovered stealing session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. The extensions exfiltrated authentication cookies, blocked access to security controls, and enabled complete account takeover through session hijacking. Over 2,300 users installed these extensions before Socket.dev researchers reported them to Google. The most sophisticated variant could inject stolen session tokens directly into attacker-controlled browsers, bypassing login screens and multi-factor authentication entirely.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.csoonline.com/article/4118607/five-chrome-extensions-caught-hijacking-enterprise-sessions.html>

## Similar posts on daily.dev

- [The Chrome Extension Backdoor: How ‘Productivity Tools’ Became Enterprise Attack Vectors](https://daily.dev/posts/the-chrome-extension-backdoor-how-productivity-tools-became-enterprise-attack-vectors-y6ejg9d1h) · Security Boulevard · 0 upvotes · 0 comments
- [108 Chrome Extensions Linked to Data Exfiltration and Sessio...](https://daily.dev/posts/108-chrome-extensions-linked-to-data-exfiltration-and-sessio--r4tdhhzt9) · Socket · 4 upvotes · 1 comments

---

Tags: [#authentication](https://daily.dev/tags/authentication), [#cyber](https://daily.dev/tags/cyber), [#devtools](https://daily.dev/tags/devtools), [#google-chrome](https://daily.dev/tags/google-chrome), [#security](https://daily.dev/tags/security)

[View this post on daily.dev](https://daily.dev/posts/five-chrome-extensions-caught-hijacking-enterprise-sessions-tzyukdadm)