Google removes 106 malicious Chrome extensions with 32M downloads that collect browsing history and sensitive credentials

Post date:

Author:

Category:


Following the discovery and prompting of a security researcher at Awake Security, Google says it has removed 106 malicious Chrome extensions that had 32 million downloads, and which were gathering browsing history and sensitive credentials from users.

They don’t yet know who was behind the malware effort.

“Awake Security said the developers supplied fake contact information when they submitted the extensions to Google,” Joe Menn at Reuters:

“When we are alerted of extensions in the Web Store that violate our policies, we take action and use those incidents as training material to improve our automated and manual analyses,” Google spokesman Scott Westover told Reuters.

Most of the free extensions purported to warn users about questionable websites or convert files from one format to another. Instead, they siphoned off browsing history and data that provided credentials for access to internal business tools.

Based on the number of downloads, it was the most far-reaching malicious Chrome store campaign to date, according to Awake co-founder and chief scientist Gary Golomb.

Google declined to discuss how the latest spyware compared with prior campaigns, the breadth of the damage, or why it did not detect and remove the bad extensions on its own despite past promises to supervise offerings more closely.

More at Reuters –
Exclusive: Massive spying on users of Google’s Chrome shows new security weakness

[via techmeme.com]



STAY CONNECTED

20,801FansLike
2,468FollowersFollow
0SubscribersSubscribe

INSTAGRAM

The Christmas Chronicles 3 Could Happen According to Director

The Christmas Chronicles 3 is not outside the realm of possibility as Chris Columbus is open to doing a third movie....

WH’s AI EO is BS

An Executive Order was just issued from the White House regarding “the Use of Trustworthy Artificial Intelligence in Government.” Leaving...

Joe White MBE appointed new UK Consul-General in SF, with new Technology Envoy role

Joe White MBE — a General Partner of Entrepreneur First, a Greylock backed early-stage deep tech fund — is leaving after...