Anytime a user clicks on a link, the extensions send information about the click to the attacker’s control server, which can optionally send a command to redirect the victim from the real link target to a new hijacked URL before later redirecting them to the actual website they wanted to visit. Users have also reported that these extensions are manipulating their internet experience and redirecting them to other websites.
#Malwarebytes chrome extension code
At the time this post went live, some, but not all, of the malicious extensions remained available for download from Google and Microsoft.Īvast researchers found malicious code in the JavaScript-based extensions that allows them to download malware onto an infected computer. The add-ons billed themselves as a way to download pictures, videos, or other content from sites including Facebook, Instagram, Vimeo, and Spotify.
In all, researchers from Prague-based Avast said they found 28 extensions for the Google Chrome and Microsoft Edge browsers that contained malware. As many as 3 million people have been infected by Chrome and Edge browser extensions that steal personal data and redirect users to ad or phishing sites, a security firm said on Wednesday.
0 kommentar(er)
