Researchers discover five fake Chrome Extensions


By MYBRANDBOOK


Researchers discover five fake Chrome Extensions

McAfee researchers found five fake extensions for the Google Chrome web browser impersonating as Netflix viewers and others to track users’ browsing activity and profit off retail affiliate programs.

 

The extensions are designed to load a piece of JavaScript that’s responsible for keeping tabs on the websites visited and inject malicious code into e-commerce portals, allowing the attackers to make money through affiliate programs for purchases made by the victims.

 

The browser add-ons in question are:

· Netflix Party (mmnbenehknklpbendgmgngeaignppnbe) - 800,000 downloads

· Netflix Party (flijfnhifgdcbhglkneplegafminjnhn) - 300,000 downloads

· FlipShope – Price Tracker Extension (adikhbfjdbjkhelbdnffogkobkekkkej) - 80,000 downloads

· Full Page Screenshot Capture – Screenshotting (pojgkmkfincpdkdgjepkmdekcahmckjp) - 200,000 downloads

· AutoBuy Flash Sales (gbnahglfafmhaehbdmjedfhdmimjcbed) - 20,000 downloads

 

The extensions offer various functions such as enabling users to watch Netflix shows together, website coupons, and taking screenshots of a website. All these five add-ons have been removed from the Chrome Web Store and users are recommended to manually remove them as well from their Chrome browser to mitigate further risks.

 

The researchers noted, “Every website visited is sent to servers owned by the extension creator. They do this so that they can insert code into eCommerce websites being visited. This action modifies the cookies on the site so that the extension authors receive affiliate payment for any items purchased.”

 E-Magazine 
 VIDEOS  Placeholder image

Copyright www.mybrandbook.co.in @1999-2024 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.varindia.com | www.spoindia.org