Kaspersky found 34 malicious Chrome extensions with 87 million download
![PDF Toolbox malicious extensions](https://b3442631.smushcdn.com/3442631/wp-content/uploads/2023/07/Screenshot-2023-07-06-160843.png?lossy=1&strip=1&webp=1)
Kaspersky Lab’s security engineers uncovered a dubious extension named PDF Toolbox, an addition that has been downloaded over two million times from the Chrome Web Store, boasting a rating of 4.2. This extension primarily facilitates conversions of PDF-class documents, such as transposing Office documents into PDF format. Judging by its evaluations, the extension seems to be of commendable quality, the reviews of which do not appear to be fabricated.
Nevertheless, upon inspection, Kaspersky detected suspect code within PDF Toolbox. The plugin accessed the domain serasearchtop[.]com to load resources, thereby being capable of executing code on any website visited by the user.
After trace analysis, Kaspersky discovered 34 analogous extensions on the Chrome Web Store. While these extensions offer specific functionalities, they have been submitted by different developers, all of them, however, connect to the same server. This pattern suggests that a nefarious cyber operation is hiding behind the scenes, using various developer accounts to avoid detection.
These extensions, with download counts exceeding 87 million times, were eradicated from the Chrome Web Store by Google following Kaspersky’s report. Users are advised to examine their Chromium-based browsers for the installation of these malicious extensions.
The malicious extension list is as follows
- Autoskip for Youtube
- Soundboost
- Crystal Adblock
- Brisk VPN
- Clipboard Helper
- Maxi Refresher
- Quick Translation
- Easyview Reader view
- PDF Toolbox
- Epsilon Ad blocker
- Craft Cursors
- Alfablocker ad blocker
- Zoom Plus
- Base Image Downloader
- Clickish fun cursors
- Cursor-A custom cursor
- Amazing Dark Mode
- Maximum Color Changer for Youtube
- Awesome Auto Refresh
- Venus Adblock
- Adblock Dragon
- Readl Reader mode
- Volume Frenzy
- Image download center
- Font Customizer
- Easy Undo Closed Tabs
- Screence screen recorder
- OneCleaner
- Repeat button
- Leap Video Downloader
- Tap Image Downloader
- Qspeed Video Speed Controller
- HyperVolume
- Light picture-in-picture