Η Google αφαίρεσε δεκάδες επεκτάσεις από το Chrome Web Store όταν μια εταιρεία ασφαλείας ανακάλυψε ότι χρησιμοποιούν κακόβουλες πρακτικές, για την espionage of users and data theft.
The security company Awake he argues that he encountered a total of 111 malicious or fake extensions of Chrome that were able to take screenshots, read the clipboard, collect credentials and track keystrokes.
Awake reports that this is one of the largest malicious campaigns targeting Chrome users, and its impact is likely very large, as all of these extensions had 32 millions downloads.
"To date, there have been at least 32.962.951 downloads of these malicious extensions, and this only applies to extensions that have been available in the Chrome Web Store since May 2020."
We do not yet know who was behind this big campaign and how many users were affected, but the attackers appear to have used domains purchased from an Israeli-based company.
“Of the 26.079 domains registered through GalComm, 15.160 or nearly 60% are malicious or suspicious: they host various traditional malware and tools tracking used in browsers. Using various evasion techniques, these domains avoided being labeled as malicious by most security solutions and thus allowed this campaign to go unnoticed,” reports Awake.
Google has already removed these extensions and the security company has released one full list with the IDs of the add-ons.
