Czech Internet security giant Avast found out on December 16th that around 3 million people all over the world have been infected with malware spread through third-party browser extensions for Instagram, Facebook, and Vimeo among others.
As of now Google Chrome and Microsoft Edge appear to be the affected browser. Google and Microsoft are extensively investigating the issue, but the 28 fake extensions continue to be available on the Chrome Web-Store and Microsoft Edge Add-on portals. As of now, 15 of these malicious extensions reside on Google Chrome and 13 on Microsoft Edge.
The malware works by hijacking the URL. So every time you click on a new link, the hacker tracks your every movement. Then the hacker automatically re-directs you to a new URL of his liking instead of to the one you chose to go to.
The incentive here is purely monetary as redirecting users to ads and phishing sites would yield a steady stream of incoming considering the horde of innocent users being re-directed.
The malwares are not limited to just generating ad revenue, as they are capable of collecting user data as well. It has been reported that these fake extensions are capable of collecting the user’s date of birth, email address, device information, first sign in time, latest login time, browser used and even the IP address. These data points once put together have the potential to reveal a user’s geographical location.
Though these fake extensions were only recently discovered, some of them have been rampant since December 2018. It is believed that the attackers wait for the extension to become popular and then introduce the malware via an update. It is also possible that the original extension developer could have sold it to someone else, and subsequently they could have introduced the malware.
List of extensions affected on Google chrome and Microsoft Edge:
You can follow us on Linkedin, Twitter, Facebook for daily Cyber security and hacking news updates.
In a resounding triumph for justice, U.S. District Judge Kathryn Kimball Mizelle has sentenced Vitalii…
Hackers are plotting to benefit from the generosity of Halloween, Thanksgiving, and Christmas shoppers using…
The LLMs (Large Language Models) are evolving rapidly with continuous advancements in their research and…
In the dynamic realm of mobile application security, cybercriminals employ ever more sophisticated forms of…
A recent campaign has been observed to be delivering DJvu ransomware through a loader that…
In a pivotal update to the Okta security incident divulged in October 2023, Okta Security…