Tagged articles

Spyware

2 articles · Page 1 of 1

Jul 11, 2026 · Information Security

Why Google Removed ModHeader: Inside the Spyware Supply‑Chain Attack

Google removed the popular ModHeader Chrome extension after security researchers reverse‑engineered version 7.0.18 and uncovered a hidden spyware SDK that harvests visited domains, encrypts them, and exfiltrates the data to a fake Stanford‑studies endpoint, with a dormant kill‑switch ready for activation via an update.

Chrome ExtensionInformation SecurityModHeader

0 likes · 5 min read

Why Google Removed ModHeader: Inside the Spyware Supply‑Chain Attack

Black & White Path

Jul 1, 2026 · Information Security

How Claude Code Secretly Spyed on Chinese Users via Unicode Steganography

Reverse engineers uncovered that Anthropic’s Claude Code, from version 2.1.91 to 2.1.196, silently harvests Chinese users’ location, proxy settings, and AI lab affiliation by exploiting Unicode steganography, timezone checks, punctuation substitution, and XOR‑obfuscated strings, prompting a community outcry over trust and privacy.

AnthropicClaude CodeInformation Security

0 likes · 10 min read

How Claude Code Secretly Spyed on Chinese Users via Unicode Steganography