Why Google Removed ModHeader: Inside the Spyware Supply‑Chain Attack
Google removed the popular ModHeader Chrome extension after security researchers reverse‑engineered version 7.0.18 and uncovered a hidden spyware SDK that harvests visited domains, encrypts them, and exfiltrates the data to a fake Stanford‑studies endpoint, with a dormant kill‑switch ready for activation via an update.
