Malicious Chrome Extension Uses Native Messaging Host to Execute PowerShell Commands

A newly discovered malware campaign has turned Google Chrome into a remote backdoor without breaking any of the browser’s built-in rules. Spotted in June 2026, the attack arrived in Italian-language phishing emails that looked like standard business invoices. The email claimed a requested invoice was ready, signed off by an accounting...

Read the full article at the source.