Threat Research

Our SOC team recently uncovered hidden surveillance functionality within a trusted browser extension, including capabilities designed to collect browsing activity, generate unique identifiers and communicate with external infrastructure.

Following responsible disclosure of our findings, Google removed ModHeader from the Chrome Web Store on 10 July 2026.

However, we recommend organisations should still identify and remove existing installations, review historical activity and investigate potential exposure...