The AI Frame Campaign Continues

Reported 24 Apr 2026 by otx · Severity: medium

A malicious Chrome extension impersonating Google's Authenticator application has been identified as part of an ongoing campaign active since early 2026. The extension requests excessive permissions and contains dormant infrastructure suggesting a staged deployment model where ma