Poisoned Pipeline / Incidents / AS221

AS221 · 2020-10

The Great Suspender Chrome extension hijacked

Browser extensions

Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.

Mapped techniques

• T0154 Malicious IDE extension

supply-chain campaign

Sources

• https://github.com/greatsuspender/thegreatsuspender/issues/1263
• https://www.crx4chrome.com/crx/221789/
• https://www.theregister.com/2021/02/05/chrome_extension_great_suspender/
• https://arstechnica.com/information-technology/2021/02/google-bans-the-great-suspender-chrome-extension-thats-used-by-millions/