KooFE Frontend Team

Jul 11, 2026 · Information Security

Why Google Removed ModHeader: Inside the Spyware Supply‑Chain Attack

Google removed the popular ModHeader Chrome extension after security researchers reverse‑engineered version 7.0.18 and uncovered a hidden spyware SDK that harvests visited domains, encrypts them, and exfiltrates the data to a fake Stanford‑studies endpoint, with a dormant kill‑switch ready for activation via an update.