Google removes malicious Chrome extensions with 75 mn installs from Web Store

Google has removed 32 malicious extensions from the Chrome Web Store, totalling 75 million downloads, that could alter search results and push spam or unwanted ads. According to BleepingComputer, the extensions included legitimate functionality to keep users unaware of the malicious behaviour, which was delivered in obfuscated code.

In an analysis of the PDF Toolbox extension (2 million downloads) available from the Chrome Web Store, cybersecurity researcher Wladimir Palant found code that was disguised as a legitimate API wrapper.

The researcher explained that the code allowed the "serasearchtop[.]com" domain to inject arbitrary JavaScript code into any website the user visited.

TRENDING NOW

Azad Engineering files Rs 740 crore IPO papers with Sebi

Finance Ministry notifies October 1 date for implementing amended GST law provisions for e-gaming

Onboard passengers irked as IndiGo flight takes off after 3-hour delay

IND Vs ENG LIVE Score, ICC World CUP 2023 Warm Up Match Updates: India to take on England in their first warm-up match at Barsapara Stadium, Guwahati

Government extends tenure of CBDT Chairman Nitin Gupta by 9 months

Government increases windfall tax on domestic crude to Rs 12,100/t from Rs 10,000/t

Country's economy will increase tenfold by 2047, it will emerge as a big power in the world: Union Minister Piyush Goyal

EPFO extends deadline to upload details by employers for higher pension option by 3-month till Dec 31

SBI, HDFC Bank, Axis Bank: How much processing fee are prominent banks charging for home loans?

Amazon Great Indian Festival dates announced; Prime members to get early access from October 8

TCS ending hybrid work, asks staff to join office starting October 1: Report

Amazon Great Indian Festival: Get Apple iPhone 14 for as low as Rs 23,249

India to host PATA Travel Mart 2023 in New Delhi

Guaranteed Pension System (GPS) vs Old Pension Scheme (OPS): Which pension scheme offers maximum retirement benefits?

IMF Executive Board approves $1.3 billion for Morocco under Resilience and Sustainability Facility Arrangement

Moreover, the report said that abuse possibilities range from inserting advertisements into webpages to stealing sensitive information.

However, the researcher did not observe any malicious activity, so the code`s purpose remained unknown.

The researcher also discovered that the code was set to activate 24 hours after installing the extension, which is typical of malicious intent, the report mentioned.

Meanwhile, Google has blocked the notorious CryptBot malware, which the company claims have stolen data from hundreds of thousands of Chrome browser users in the past year.

According to the company, CryptBot is a type of malware often referred to as an `infostealer` because it is designed to identify and steal sensitive information from victims` computers such as authentication credentials, social media account logins, cryptocurrency wallets, and more.