Microsoft Removes 119 Edge Extensions Using Malicious Steganography in Images and Fonts

Colleagues, please note: Microsoft has disabled 119 Edge extensions that concealed executable code within images and fonts.

- Campaign StegoAd: code embedded in PNG/WebP and WOFF2 files; activation delayed by days to evade scans.
- Up to 2.6 million installs (maximum). Observed impacts: credential and cookie theft, RCE, and ad fraud.
- Recommendations: compare installed extensions against Microsoft's list, remove suspicious ones, reset passwords, and enable strong 2FA (hardware keys preferred).

Why it matters: steganography and delayed activation let malicious extensions bypass scans and remain in stores for extended periods.

How will you vet extensions in your organization?

#cybersecurity #browser #Edge #informationsecurity