Abdelrahman
Urgent Alert for Over 3 Million Chrome Users: Compromised Extensions Must Be Deleted
Over three million users of Google Chrome have received a critical warning regarding 16 browser extensions that have fallen prey to hackers. Cybersecurity professionals are advising these users to uninstall the affected extensions immediately after discovering that malicious codes were implanted within the software.
Hackers can exploit these vulnerabilities to access user data and execute "search engine fraud," a practice where they funnel web traffic to sites they control, generating ad revenue for themselves.
The compromised extensions include popular tools like Blipshot, Emojis, Color Changer for YouTube, and Video Effects for YouTube. Other affected programs are Audio Enhancer, Themes for Chrome, YouTube Picture in Picture, Mike Adblock for Chrome, Super Dark Mode, and Emoji Keyboard Emojis for Chrome. Additionally, extensions such as Adblocker for Chrome, Nimble Capture, KProxy, and Wistia Video Downloader have also been flagged as unsafe.
The team from GitLab Threat Intelligence, who uncovered this security breach, confirmed that Chrome has since removed these extensions from its Web Store. However, users who had already installed them need to manually uninstall these add-ons to protect their data.
To safeguard against similar threats, it’s crucial to carefully evaluate any browser extensions before installation. This includes scrutinizing user permissions, which reflect the files and devices the extensions wish to access.
Key Precautions for Browser Safety
- Review Permissions: Always check what permissions an extension requests.
- Read User Reviews: Investigate feedback from other users regarding the extension’s reliability.
- Scan for Malware: Use reputable antivirus software to check your system for any hidden threats.
Researchers have identified 16 Chrome extensions that have been compromised and should be deleted immediately by users.
While Chrome does not support extensions on Android devices, the ramifications of this security threat primarily impact users operating these extensions on computers. Unlike apps created from the ground up, these Chrome extensions were hijacked by cybercriminals through phishing attacks targeting their developers. In several instances, the original developers were deceived into relinquishing control of their software willingly.
Once the hackers gained access, they injected harmful updates, putting the security of anyone who had previously installed them at risk. As noted by Notebookcheck, these changes often went unnoticed by users who had already granted the necessary permissions, enabling attackers to manipulate web activities in real-time.
Researchers at GitLab Threat Intelligence also pointed out a commonality among the compromised extensions: they all requested permissions that allowed them to interact with any website that users visited. This enabled them to inject harmful code across multiple sites, potentially infecting a wide swath of the internet.
Before installing any browser extension, it’s essential to read user reviews and feedback for any hints of malware or issues.
According to tech analysts from Tom’s Guide, while browser extensions can significantly enhance the user experience, they often don’t carry the same level of scrutiny as mobile applications, as many are developed by smaller companies or individual programmers.
Experts recommend that Chrome users meticulously examine the permission settings of any extensions they consider adding to their browsers. Additionally, checking reviews can reveal whether previous users encountered difficulties or suspicious behavior.
Warnings about these 16 compromised extensions have already prompted affected users to advise others against downloading these programs. The exploitation of trusted software distributors and the reputation of the Chrome Web Store further exacerbated the effectiveness of this attack.
After a recent alert directed toward millions of Google email users, it’s evident that phishing tools are increasingly sophisticated, enabling hackers to steal sensitive web security information in real-time. They deceive victims into believing they are logging into legitimate accounts by redirecting them to fraudulent websites that closely resemble actual browser interfaces.
Cyber warfare expert James Knight has stressed the importance of having active spam filters on all accounts to block phishing attacks. He recommends immediately deleting any suspicious emails that prompt users to click on links, especially if they haven’t been filtered into the spam folder.
The FBI indicated that phishing incidents constituted the most commonly reported type of internet crime in 2023, accounting for nearly a third of all cybercrime reports. Along with uninstalling harmful extensions and reviewing permissions, tech experts encourage users to utilize antivirus software to scan for malware or other viruses on their machines.
