Chrome Extension Scam Exposed: Hackers Stealing Meta Accounts

A sophisticated campaign targeting Meta advertisers through fake AI-powered ad optimization tools has been uncovered, with cybercriminals deploying malicious Chrome extensions to steal credentials and hijack business accounts.

Cybereason Security Services has identified an evolving malicious Chrome extension campaign that specifically targets Meta (Facebook/Instagram) advertisers through a deceptive platform called “Madgicx Plus.”

This fake AI-driven ad optimization tool represents the latest iteration of a broader campaign previously documented by DomainTools, demonstrating how threat actors adapt their social engineering tactics while recycling existing infrastructure.

The campaign leverages the legitimate reputation of Madgicx, a well-known advertising technology company, by creating convincing impersonation websites that promote fake browser extensions.

These malicious tools are marketed as productivity enhancers and ad performance optimizers, but actually function as sophisticated credential harvesting and session hijacking malware.

Security researchers discovered an extensive network of professionally ...