Malicious Chrome Extension Uses Native Messaging Host to Execute PowerShell Commands

A newly discovered malware campaign has turned Google Chrome into a remote backdoor without breaking any of the browser’s built-in rules. Spotted in June 2026, the attack arrived in Italian-language phishing emails that looked like standard business invoices. The email claimed a requested invoice was ready, signed off by an accounting office, and showed what […]

The post Malicious Chrome Extension Uses Native Messaging Host to Execute PowerShell Commands appeared first on Cyber Security News.