The researchers της Αμερικάνικης εταιρείας ασφαλείας ICEBRG εντόπισαν τέσσερις επεκτάσεις του Chrome που περιείχαν κακόβουλο κώδικα. Και οι τέσσερις επεκτάσεις ήταν διαθέσιμες μέσω του Chrome Web Store.
According to the researchers, the four extensions of Chróme were designed to allow attackers to send malicious commands to programs browsing of users in JavaScript format. 
Attackers used this feature to perform click fraud by loading a page in the background that contained advertisements.
The names of the four extensions are:
Change HTTP Request Header (ppmibgfeefcglejjlpeihfdimbkfbbnm), Nyoogle – Custom Logo for Google (ginfoagmgomhccdaclfbbbhfjgmphkph), Lite Bookmarks (mpneoicaochhlckfkackiigepakdgapj), and Stickies – Chrome's Post-it Notes (djffibmpaakodnbmcdemmmjmeolcmbae).
Of the four, Nyoogle is still available on the Chróme Web Store, up to now.
Extensions have been down altogether over 500.000 times by Google's browser users. When the ICEBRG researchers detected malicious behavior of addons, they informed the National Center for Internet Security in the Netherlands (NCSC-NL) and US-CERT.
While three of the four extensions catslowdirectly from the Chrome Web Store, many Chrome users still use them in their browsers.
The company published a detailed report for malicious extension behavior in hopes that users will take a moment to check it out program their browser and remove malicious extensions from their computers.
