According to Odaily Planet Daily, Slow Fog CISO 23pds stated that on December 24, a phishing attack stole the Google Chrome Web Store credentials of Cyberhaven employees. The attackers used these credentials to publish a malicious version of the Chrome extension (version 24.10.4).