{"id":236273,"date":"2026-04-27T09:31:00","date_gmt":"2026-04-27T13:31:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/04\/27\/linkedin-browsergate\/"},"modified":"2026-04-27T12:15:15","modified_gmt":"2026-04-27T16:15:15","slug":"linkedin-browsergate","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/04\/27\/linkedin-browsergate\/","title":{"rendered":"LINKEDIN BROWSERGATE"},"content":{"rendered":"

LINKEDIN BROWSERGATE<\/a><\/p>\n

https:\/\/securityaffairs.com\/191383\/security\/linkedin-browsergate.html<\/a><\/p>\n

Publish Date: 2026-04-27 09:31:00<\/a><\/p>\n

Source Domain: securityaffairs.com<\/a><\/p>\n

LINKEDIN BROWSERGATE<\/h2>\n<\/p>\n

\t\t\t\t\t\t\t Pierluigi Paganini<\/span>
\n\t\t\t\t\t\t\t\"\"\/ April 27, 2026<\/span><\/p>\n

\t\t\t\t\t\t\"\"\/<\/p>\n

BrowserGate claims LinkedIn secretly fingerprints users via extensions and device data, sending encrypted results to third parties for tracking.<\/h2>\n

BrowserGate is an investigation conducted by Fairlinked (https:\/\/browsergate.eu\/), an association of commercial LinkedIn users, which documents what it describes as one of the largest data breach and corporate espionage scandals in digital history. The central thesis: every time one of the billions of users visits linkedin.com, hidden code scans the computer for installed software, collects the results, and transmits them to LinkedIn servers and third-party companies, including a US-Israeli cybersecurity firm.<\/p>\n

The user is never informed nor asked for consent. LinkedIn\u2019s privacy policy makes no mention of it.<\/p>\n

The system consists of three cooperating modules within a single JavaScript bundle (Webpack chunk.905, ~2.7 MB, Ember.js framework):<\/p>\n\n\n\n\n\n
System<\/strong><\/td>\nInternal Name<\/strong><\/td>\nFunction<\/strong><\/td>\n<\/tr>\n
APFC \/ DNA<\/td>\ntriggerApfc, triggerDnaApfcEvent<\/td>\nDevice fingerprinting: 48 browser characteristics<\/td>\n<\/tr>\n
AED<\/td>\nAedEvent, fetchExtensions<\/td>\nActive extension scanning via fetch()<\/td>\n<\/tr>\n
Spectroscopy<\/td>\nSpectroscopyEvent, scanDOMForPrefix<\/td>\nPassive DOM scanning<\/td>\n<\/tr>\n<\/table>\n

Stage 1 \u2014 Active Extension Detection (AED)<\/h2>\n

Inside Webpack module 75023, there is a hardcoded array with entries in the form {id: \u201c\u2026\u201d, file: \u201c\u2026\u201d}<\/strong> where id is the Chrome Web Store extension ID and file is a path to an internal extension resource declared as web-accessible.<\/p>\n

The probing mechanism:<\/strong><\/p>\n

Chrome extensions can expose internal files to web pages through the web_accessible_resources<\/strong> field in their manifest.json. When an extension is installed and has exposed a resource, a fetch() request to chrome-extension:\/\/{id}\/{file} will succeed. When it is not installed, Chrome blocks the request and the promise is rejected.<\/p>\n

Method 1 \u2014 Parallel batch scan:<\/strong> All fetch() requests are…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

LINKEDIN BROWSERGATE https:\/\/securityaffairs.com\/191383\/security\/linkedin-browsergate.html Publish Date: 2026-04-27 09:31:00 Source Domain: securityaffairs.com LINKEDIN BROWSERGATE Pierluigi Paganini April…<\/p>\n","protected":false},"author":1,"featured_media":236274,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/securityaffairs.com\/wp-content\/uploads\/2016\/11\/linkedin-2.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[30,24],"class_list":["post-236273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-breach","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/236273"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=236273"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/236273\/revisions"}],"predecessor-version":[{"id":236275,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/236273\/revisions\/236275"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/236274"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=236273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=236273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=236273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}