TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Widely Used Browser Extensions Selling User Data

2026-04-27 · Read original ↗

ATT&CK techniques detected

7 predictions
T1176.001Browser Extensions
96%
“widely used browser extensions selling user data dozens of widely used browser extensions have been collecting and selling user data with explicit disclosure in their privacy policies, a layerx security study has found. the browser security firm has identified more than 80 extens…”
T1176.001Browser Extensions
94%
“29 business - focused extensions that gather browsing data from enterprise systems, potentially exposing internal activity through commercial datasets. the findings suggest that traditional extension security checks may miss privacy risks. even when disclosed, data - selling prac…”
T1176.001Browser Extensions
76%
“. from an initial dataset of roughly 9000 extensions, the researchers said they analyzed 6666 privacy policies and confirmed 82 extensions engaged in commercial data sharing after manual review. one network of 24 media extensions, including netflix, hulu, disney +, amazon prime v…”
T1176Software Extensions
76%
“widely used browser extensions selling user data dozens of widely used browser extensions have been collecting and selling user data with explicit disclosure in their privacy policies, a layerx security study has found. the browser security firm has identified more than 80 extens…”
T1176Software Extensions
59%
“29 business - focused extensions that gather browsing data from enterprise systems, potentially exposing internal activity through commercial datasets. the findings suggest that traditional extension security checks may miss privacy risks. even when disclosed, data - selling prac…”
T1217Browser Information Discovery
44%
“29 business - focused extensions that gather browsing data from enterprise systems, potentially exposing internal activity through commercial datasets. the findings suggest that traditional extension security checks may miss privacy risks. even when disclosed, data - selling prac…”
T1176Software Extensions
42%
“. from an initial dataset of roughly 9000 extensions, the researchers said they analyzed 6666 privacy policies and confirmed 82 extensions engaged in commercial data sharing after manual review. one network of 24 media extensions, including netflix, hulu, disney +, amazon prime v…”

Summary

Dozens of browser extensions openly sell user data via privacy policy disclosures