ModHeader Extension Pulled for Dormant Data Theft Code
TechNadu · x · 2026-07-14
Browser extension ModHeader, which boasts roughly 1.6 million installations, has been removed from the official Google and Microsoft stores. Researchers discovered that its officially signed extension contains a complete, albeit dormant, data collection pipeline that could be activated at any time via standard updates. While there is currently no evidence of actual data theft, the necessary infrastructure is already in place.
Related event: Browser Extension ModHeader Pulled for Dormant Data Theft Code(2 posts)→
More from Safety
- Anthropic's S-1 unusually discusses AI sentience and moral status risks — birchlse · 2026-10-27
- The most dangerous instruction you can give a superintelligent machine: lie to me — r0ck3t23 · 2026-10-27
- Rob Miles: AI employees recording audio logs as automated hacking takes off — Puzzleheaded-King584 · 2026-10-27
- Researcher Asks Whether Suspicious Model Behavior Can Ever Be Explained — or Faked — jd_pressman · 2026-10-27
- UK AISI papers: no good safeguards yet against misuse of biological AI tools — davidmanheim · 2026-10-27
- Washington's message to AI execs: Please shut up — TobyWalsh · 2026-10-27