malicious Chrome extensions

[Rogue Valley]

Awake Security says it has discovered 111 malicious or fake Chrome extensions created for the purpose of stealing information. The culprit is CommuniGal Communication Ltd. (GalComm), an Israeli company that is ostensibly an Internet Domain Registrar. These extensions can take screenshots, read the clipboard, harvest credential tokens stored in cookies or parameters, grab user keystrokes (like passwords), etc. To date, there have been at least 32,962,951 downloads of these malicious extensions—and this only accounts for the extensions that were live in the Chrome Web Store as of May 2020. Awake says it has worked with Chrome to disable downloads of suspected malicious extensions.

Discovery of a Massive, Criminal Surveillance Campaign

 

[jcgriff2]

Backup your Chrome favorites/bookmarks.

Uninstall Chrome.

Restart your computer to allow boot and kernel mode drivers to be deleted.

Install the latest version of Chrome.

Import your saved Chrome bookmarks.

Regards. . .

jcgriff2

 

[TypicalRussian]

Awake Security says it has discovered 111 malicious or fake Chrome extensions created for the purpose of stealing information. The culprit is CommuniGal Communication Ltd. (GalComm), an Israeli company that is ostensibly an Internet Domain Registrar. These extensions can take screenshots, read the clipboard, harvest credential tokens stored in cookies or parameters, grab user keystrokes (like passwords), etc. To date, there have been at least 32,962,951 downloads of these malicious extensions—and this only accounts for the extensions that were live in the Chrome Web Store as of May 2020. Awake says it has worked with Chrome to disable downloads of suspected malicious extensions.

Discovery of a Massive, Criminal Surveillance Campaign

good post

I wonder if anti-virus protection services covers browser extensions

 

[TypicalRussian]

ill say this for the first time but it will come up again

cyber security will be one of the largest growing sectors of the tech industry, and its simple-more technology, more security, and as of right now, the security is lacking