Poisoned Pipeline / Incidents / AS143

AS143 · 2026-08

737 Chrome VPN extensions brand impersonation

Browser extensions

Socket: 737 Chrome VPN extensions linked to brand impersonation and
browser traffic redirection.

Mapped techniques

• T0109 Publish malicious artifact
• T0136 Brandjacking

supply-chain campaign

Sources

• https://socket.dev/blog/chrome-vpn-extension-impersonation