Security Notification – Chrome Extensions

Malicious Chrome Extensions have recently targeted NetSuite and other cloud services by stealing credentials. These tools promise streamlined access or account management for NetSuite via in-browser tools, but they may also steal credentials and hijack user sessions. NetSuite strongly recommends you immediately review and remove any malicious Chrome Extensions in use by your users.

Known malicious Extensions:

• DataByCloud Access
• Tool Access 11
• DataByCloud 1
• DataByCloud 2
• Software Access

If you find malicious Extensions, NetSuite recommends performing a password reset and activity review for any affected users. You can reduce the threat of malicious extensions by enabling two-factor authentication for all roles.

If you have any questions, please contact NetSuite Customer Support.