BSides London 2025

Software beginners often assume that installing a browser extension is harmless. However, recent incidents reveal even widely-used extensions can deliver spyware, hijack sessions, or steal credentials. This rookie-friendly talk examines a malicious network of Firefox and Chrome extensions impersonating popular games that hijacked sessions, redirected users to scams, and stole sensitive credentials. We’ll demystify browser extension threats and share a simple checklist for evaluating extensions. In just 15 minutes, attendees will learn easy habits to keep their browsers safe without specialized tools.