v3 → v4
Scores
trust_score0 → 0
severity_base— → —
score_modifier-8 → -8
Sections
Campaign Overview and Attribution → Campaign Scope and Extension List
unchanged
Supply-Chain Attack Method: Acquisition and Malicious Update → Wallet Drainer and Credential-Theft Modules
unchanged
Technical Capabilities and Malware Framework → Command-and-Control Infrastructure
unchanged
Command-and-Control Infrastructure → Store Removal Status (Partial, Not Confirmed for All 19)
unchanged
Known Malicious Extensions → Origins and Related Research
unchanged
Platform Response and Remediation Status → (section 6)
unchanged
User Impact and Financial Losses → (section 7)
unchanged
Systemic Risk: Extension Ownership Transfer as Attack Vector → (section 8)
unchanged
Timeline events
+ added2025-05-30 — (no description)
+ added2026-08 — (no description)
- removed2026-02 — (no description)
- removed2026-08-14 — (no description)
- removed2026-08-31 — (no description)
~ changed2024-02: “” → “”
~ changed2026-08-27: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v3 hash: fa30acfe2a49c9973db52b3b98c5489e54482d2aaf808d145dd0e25db958f513
v4 hash: 9b854c753c8f51803821f3a73a886aecb2af27b19cf5767f1a4b701d6c0747d9