Security researchers at Socket have identified over 100 malicious extensions in the Chrome Web Store that are part of a coordinated campaign. These extensions steal Google OAuth2 Bearer tokens, deploy backdoors, and carry out ad fraud. At the time Socket published its report, all affected extensions were still available in the store. Google hasContinue Reading
Researchers have discovered a campaign that tracked users’ online behavior using 18 browser extensions available in the official Chrome and Edge webstores. The total number of installs is estimated to be over two million. These extensions offered functionality, received good reviews, touted verification badges, and some even enjoyed featured placement. But when anContinue Reading
Google has removed more than two dozen malicious Chrome extensions from the official Chrome Web Store. These extensions were installed on over 75 million times by Chrome user, who need to become active to remove the extensions from their browsers. Wladimir Palant detected the malicious extensions and published information about them onContinue Reading
System utility and optimizer apps have been found spreading malware and adware on the Play Store Another bad batch of Android apps used for phishing, as well as spreading malware and adware, have been discovered on the Google Play Store. As reported by Bleeping Computer(opens in new tab) and first discovered byContinue Reading
Researchers at Zimperium zLabs discovered a malicious browser extension, dubbed Cloud9, that can steal users’ private and sensitive information, and take complete control of the victim’s device. What makes Cloud9 particularly unnerving is that it steals data by tracking your keystrokes (i.e. keylogging). It spies on victims’ web browser activity, which wouldContinue Reading