Chrome/Edge ModHeader removed after dormant browsing-history collector found

Intelligence Summary

Google and Microsoft have removed the ModHeader extension from their Chrome and Edge stores. Researchers reported that the official store version contained a hidden browsing-history collector. The collector appeared dormant, with an empty allow-list that kept it inactive. No evidence has been shown that it ever collected or transmitted browsing data. Users should stop using ModHeader and update/replace it with an alternative to avoid potential future exposure.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics