Breach404
Back to Insights
Cybersecurity2 min readJuly 13, 2026

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

ModHeader, a browser extension with 1.6 million users, was removed from Google Chrome and Microsoft Edge after security researchers discovered it contained dormant code capable of collecting user data without detection. You should immediately uninstall Mo

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free