build1 publisher
A Firefox extension arms itself five seconds after install from a lookalike Google domain
The add-on shipped to Mozilla's store as a dispatcher and took its instructions afterwards from a page it opened itself, on a domain built to resemble googleusercontent.com.
Publishers:socket.dev
Reality
- Evidence62
- Adoption10
- Hype gap−10
- Incentives55
- Confidence58