Malicious Chrome extensions steal login data by impersonating Workday, NetSuite and SAP SuccessFactors platforms, cybersecurity researchers say.
They can intercept user credentials while providing real-time context that helps attackers convince victims to approve MFA ...