Cyber Security News Aggregator
.Cyber Tzar
provide acyber security risk management
platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.
First slide label
Some representative placeholder content for the first slide.
Second slide label
Some representative placeholder content for the second slide.
Third slide label
Some representative placeholder content for the third slide.
Malicious Chrome extension targeting Apple App Store Connect developers through fake ASO service - full analysis
published on 2026-02-22 22:11:15 UTC by /u/Huge-Skirt-6990Content:
Discovered a malicious Chrome extension (mimplmibgdodhkjnclacjofjbgmhogce) on its first day of deployment while testing a detection tool I'm building. https://github.com/toborrm9/malicious_extension_sentry
Behind it is a coordinated operation at boostkey[.]app posing as an ASO service. They charge developers $150 in crypto then walk them through a 5-step onboarding flow ending with the developer handing over their App Store Connect session cookies (myacinfo and itctx).
The extension ID is hardcoded in the platform source code confirming both were built by the same actor.
Most calculated detail: they require the developer to provide a proxy through their own IP so Apple's anomaly detection sees nothing unusual when the session is replayed.
Reported to Google and Apple. Full technical report https://blog.toborrm.com/findings/boostkey.html
[link] [comments]
https://www.reddit.com/r/netsec/comments/1rbzbyv/malicious_chrome_extension_targeting_apple_app/
Published: 2026 02 22 22:11:15
Received: 2026 02 22 22:27:35
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Views: 1
