Spammers and cyber criminals have started a new wave of phishing attacks aimed at hijacking browser extensions. Hackers hijacked Web Developer extension, updated it to version 0.4.9, and pushed it out to its 1,044,000 users. The malicious software build fetched JavaScript code from the web and ran it within users’ web browsers to forcibly inject advertisements on web pages. Users should also consider changing their passwords for all web accounts, as well as nullify login tokens and cookies used on websites they visited.
Source: https://thehackernews.com/2017/08/chrome-extension-for-web-developers.html