Οι ερευνητές της Αμερικάνικης εταιρείας ασφαλείας ICEBRG εντόπισαν τέσσερις επεκτάσεις του Chrome που περιείχαν κακόβουλο code. All four extensions were available through the Chrome Web Store.
According to the researchers, the four extensions of Chróme were designed to allow attackers to send malicious commands to programs περιήγησης των χρηστών σε μορφή JavaScript. 
Attackers used this feature to perform click fraud by loading a σελίδα in the background that contained ads.
The names of the four extensions are:
Change HTTP Request Header (ppmibgfeefcglejjlpeihfdimbkfbbnm), Nyoogle – Custom Logo for Google (ginfoagmgomhccdaclfbbbhfjgmphkph), Lite Bookmarks (mpneoicaochhlckfkackiigepakdgapj), and Stickies – Chrome's Post-it Notes (djffibmpaakodnbmcdemmmjmeolcmbae).
Of the four, Nyoogle is still available on the Chróme Web Store, up to now.
The extensions have been downloaded a total of over 500.000 times by the users of the Google browser. When ICEBRG researchers detected the addons' malicious behavior, they informed the Netherlands' National Cyber Security Center (NCSC-NL), and the American US-CERT Team.
While three of the four extensions were removed directly from the Chrome Web Store, many of Chrome's users are still using them in their browsers.
The company published a detailed report for the malicious behavior of extensions in the hope that users will spend some time controlling their browser and removing malicious extensions from their computers.
