Learn how malicious browser extensions exploit user credentials in this 43-minute conference talk that examines the intersection of password security and browser vulnerabilities. Discover the specific permissions and methods that malicious extensions use to steal user passwords, with detailed breakdowns of attack vectors and exploitation techniques. Examine live examples demonstrating how these attacks work in practice, providing concrete understanding of the threat landscape. Gain practical knowledge of defensive strategies and best practices to protect against browser extension-based credential theft, equipping yourself with actionable security measures for both personal and organizational contexts.