
A Chinese trader lost $1 million to a hacking scam involving a promotional Google Chrome plugin called Aggr. This malicious plugin steals cookies from users, allowing hackers to bypass passwords and two-factor authentication (2FA) to log into the victim’s Binance account.
For more visit the source:
https://cointelegraph.com/news/hackers-steal-millions-chrome-plugin-binance-scam

Passkeys would have helped here I assume.