We need to summarize news in 3-4 sentences, max 400 characters. Must be factual, no evaluation. Let’s extract key facts:
- Microsoft warned about malicious StegoAd campaign distributing malware via Edge extensions in official store.
- Malware hidden in images and fonts, activated after days, used steganography; early versions embedded JS after PNG IEND marker.
- 119 extensions from >90 developer accounts, total ~2.6 million installs; many had legitimate functions and positive reviews.
- Attackers later used WebP, WOFF2, Asian characters, server checks, and obfuscation; extensions checked for dev tools and went dormant if analyzed.
- Used for ad fraud, search hijacking, affiliate link hijacking, also stole credentials, 2FA codes, WordPress admin logins, cookies, and executed arbitrary JS.
- Infrastructure included >10 C2 domains, Cloudflare Workers, GitHub Pages, switched from Manifest V2 to V3.
- All 119 extensions removed, developer accounts blocked; users advised to check extensions page and change credentials if compromised.
Now craft 3-4 sentences, under 400 characters. Let’s count approximate characters.
Sentence 1: “Microsoft warned that the StegoAd campaign spread malware through 119 Edge extensions hosted in the official store.” Count characters: let’s count roughly. “Microsoft warned that the StegoAd campaign spread malware through 119 Edge extensions hosted in the official store.” That’s about 106 characters.
Sentence 2: “The malicious code was hidden in images, fonts or WebP/WOFF2 files, activated after days and evaded detection by using steganography and server checks.” Approx 150 characters.
Sentence 3: “The extensions, many with legitimate functions and positive reviews, stole credentials, 2FA codes, WordPress admin