Chrome Extensions Stole Data
More than 70 different extensions and add-ons have been found spying on and sending sensitive data of Google Chrome s, according to Reuters UK.
Add-ons and extensions to browsers have been with us for several good years and their popularity does not seem to be diminishing. From adblocks to plug-ins that track promotions in online shops. In short, the Chrome Web Store (and other "stores" with add-ons for different browsers) offers almost anything. Unfortunately, this includes threats, such as the current one, as around 32 million Google Chrome s have had their data stolen.
Pretending to be add-ons to protect s (to warn about websites with doubtful reputation, attempts to defraud money, etc.) they sent all sensitive data of the people who installed them to external servers. Extensions were designed specifically to by Google's security features. When trying to browse the Internet, the person using them was redirected through various external sites that collected information such as key interception, which enabled fraudsters to match virtually every and of a person with the infected browser.
In its report, Awake Security stated that the extensions sent the collected information to more than 15 thousand internet domains owned by GalComm from Israel. Awake claims that GalComm must have known what was going on. However, the Israelis deny everything. The owner of the company Moshe Fogel told Reuters that his company is not involved in any criminal activity and that the domains used for illegal activity have been inactive for a long time and the case will be investigated.
“When we are alerted of extensions in the Web Store that violate our policies, we take action and use those incidents as training material to improve our automated and manual analyses," said Google's spokesperson Scott Westover.
The affair shows that it might be better not to install dozens of plug-ins in our browser, except for those truly necessary and verified, because threats are lurking everywhere, even where we don't expect them.
- Paradox games under fire. Review bombing from Chinese players hits Stellaris, Crusader Kings and Europa Universalis
- HoI4: Graveyard of Empires devs it their mistakes. They explain what went wrong and promise changes
- Review bombing is players response to the investigation against dev of Schedule 1, the biggest hit on Steam in recent weeks
- WhatsApp's iOS Chat Privacy beta is trying out new features, including one that stops photos and videos from auto-saving to your device
- Infinite open world and realistic graphics. This GTA 6 clone has only one major problem