We've discovered a malicious Chrome extension impersonating Madgicx that's designed to steal your Meta advertising account credentials. Please read this entire post and take immediate action if you've encountered this fake extension.
What Happened
A dangerous copycat scammer has created a fake Chrome extension called "Madgicx Plus - The SuperApp for Meta Advertisers" that mimics our official branding and logo. This extension is NOT created, authorized, or affiliated with Madgicx in any way.
The malicious extension is specifically designed to:
- Steal your Meta Business Manager login credentials
- Gain unauthorized access to your advertising accounts
- Potentially compromise your ad spend and sensitive business data
.png)
How to Identify the Fake Extension
Red flags that indicate this is NOT an official Madgicx tool:
- Not listed on our website: All legitimate Madgicx tools are exclusively available through madgicx.com
- Unauthorized branding: While it uses our logo and similar styling, we never authorized this extension
- Suspicious distribution: The fake extension may be shared via unsolicited emails, unofficial Facebook groups, or suspicious websites
- Publisher verification: In the Chrome Web Store, check the publisher name - legitimate Madgicx extensions will only be published by verified Madgicx accounts
Immediate Action Required: If You Installed the Fake Extension
If you've installed any Chrome extension claiming to be "Madgicx Plus" or similar, take these steps immediately:
1. Remove the Extension Right Now
- Open Chrome and go to chrome://extensions/
- Find any Madgicx-related extension you didn't install from our official website
- Click "Remove" to uninstall it completely
2. Secure Your Meta Accounts
- Change your Meta Business Manager password immediately
- Update passwords for all connected Facebook and Instagram accounts
- Enable two-factor authentication (2FA) on all Meta accounts
- Review recent account activity for any unauthorized changes
3. Check Your Ad Accounts
- Review recent ad campaigns for unauthorized activity
- Check billing information and payment methods
- Monitor account spending for unusual patterns
4. Contact Support
- Reach out to Madgicx Support immediately at support@madgicx.com
- Contact Meta Business Support to report the potential security breach
- Consider consulting with your IT security team if this affects business accounts
How to Verify Official Madgicx Tools
Before installing ANY tool claiming to be from Madgicx:
- ✅ Check our official website: All legitimate tools are listed at madgicx.com
- ✅ Verify the publisher: Official extensions will be published by verified Madgicx accounts
- ✅ Look for official announcements: We announce new tools through our official channels
- ❌ We NEVER ask for login credentials outside our official app
- ❌ We don't distribute tools through unofficial channels or emails
What Madgicx Is Doing to Protect You
We take this security threat extremely seriously and have taken immediate action:
- Reported to Google: We've filed reports with Google to have the malicious extension removed from the Chrome Web Store
- Law enforcement notification: This incident has been reported to appropriate authorities
- Enhanced monitoring: We're actively monitoring for additional copycat attempts and similar threats
- Community protection: We're publishing this alert to ensure our entire community stays safe
Best Practices to Stay Secure
Protect yourself from future threats:
- Always verify URLs before installing any browser extensions or tools
- Enable multi-factor authentication on ALL your advertising and business platforms
- Be skeptical of unsolicited recommendations for new tools, even if they claim to be from trusted brands
- Regular security audits: Periodically review installed browser extensions and remove any you don't recognize
- Official channels only: Only download tools from official websites and verified app stores
Questions or Concerns?
If you have any questions about this security alert or need help securing your accounts:
- Contact Madgicx Support: support@madgicx.com
- Check our official website: madgicx.com for verified tools and updates
- Follow our official social media: for security updates
When in doubt, contact us directly. We'd rather answer a hundred verification questions than have a single user fall victim to these scammers.
Remember: Your account security is our top priority. We will never ask for your login credentials outside of our official application, and all legitimate Madgicx tools are exclusively available through our official website.
This security alert was published on September 15th, 2025, and will be updated as the situation develops.
Yuval is the Head of Content at Madgicx. He is in charge of the Madgicx blog, the company's SEO strategy, and all its textual content.