Author Topic: Beware Chrome extensions  (Read 930 times)

0 Members and 1 Guest are viewing this topic.

Offline Maik

  • Administrator
  • Forum Deity
  • *****
  • Posts: 17415
Beware Chrome extensions
« on: Thursday, 02 November, 2017 @ 14:42:28 »
This is a public service announcement that everyone should be careful when installing extensions from the Chrome Web Store. While most extensions are perfectly harmless, it is starting to become more and more common for unwanted and malicious extensions to be uploaded to the store and not be removed for quite a while.

For example, today I was told about a new Chrome extension called Image Downloader (this link will hopefully be down soon) that Aura, one of our malware removal helpers, thought looked suspicious.  On closer examination, this extension is adware as it injects advertisements into web sites that you are visiting, opens unwanted sites in new tabs when you interact with the site, and injects advertisements into the top of search engine result pages.

You can see a video illustrating how this extension works below.

Malicious Chrome Extension Steals Data Posted to Any Website

Malicious browser extensions continue to bear fruit for hackers who have been using them to spread banking malware and adware, and hijacking popular add-ons to spread other nasty code.

The latest abuse involves a Google Chrome extension being spread in phishing emails that steals any data posted online by victims.