Do Son 
Security company Radware reports that criminals have infected more than 100,000 users with malicious extensions hosted on the official expansion market Chrome Web Store. Google’s security team removed five of the extensions on its own and removed two more after Radware reported them. In the past few months, Chrome’s official expansion market has repeatedly found malicious extensions.
Popular extensions have also been found to have been hacked to push ads to users. The seven new malicious extensions removed by Google are Nigelify, PwnerLike, Alt-j, Fix-case, Divinity 2 Original Sin: Wiki Skill Popup, Keeprivate, and iHabno.
These malicious extensions will steal the user’s Facebook and Instagram credentials after installation and collect information about the victim’s Facebook account, but use this information to send malicious links to their friends to infect more users. In addition, malicious programs also install mining scripts to mine tokens such as Monero, bytecoin, and electroneum.
Support Our Threat Intelligence
Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
