Three million users hit by malware infected Google Chrome, Microsoft Edge browser extensions: Avast | Tech News

Three million users hit by malware infected Google Chrome, Microsoft Edge browser extensions: Avast

Avast has warned about 28 malicious extensions that include downloaders for Facebook videos and Instagram stories. 

By: HT TECH
| Updated on: Aug 21 2022, 13:31 IST
Many users have reported that these extensions were “manipulating their Internet experience and redirecting them to other websites”.
Many users have reported that these extensions were “manipulating their Internet experience and redirecting them to other websites”. (Pixabay)

Microsoft Edge and Google Chrome extensions that contained malware have been downloaded by around three million people, as per a report by Avast. Avast researchers have said that they managed to identify around 28 extensions on Chrome and Edge that were infected with malware.

In most cases, these add-ons (the browser extensions) were billed to facilitate downloading pictures, videos or other content from social media platforms like Instagram, Facebook, Spotify and Vimeo. The malware contained in the extensions, as per reports, redirected users to ads or phishing sites and stole their personal data.

You may be interested in

MobilesTablets Laptops
24% OFF
Google Pixel 128GB
  • Black
  • 4 GB RAM
  • 128 GB Storage
Google Pixel 7 Pro 5G
  • Obsidian
  • 12 GB RAM
  • 128 GB Storage
Samsung Galaxy S23 5G
  • Green
  • 8 GB RAM
  • 128 GB Storage
48% OFF
Samsung Galaxy S22
  • Green
  • 8 GB RAM
  • 128 GB Storage

Avast wrote in a blog post that its researchers have managed to identify malicious code in the JavaScript-based extensions in Chrome and Edge both. These codes allowed the infected extensions to download more malware into the users' systems. Counting all the downloads clocked on Google and Microsoft web stores, researchers said that around three million people may have been affected globally.

Also read
Looking for a smartphone? To check mobile finder click here.

Many users have reported that these extensions were “manipulating their Internet experience and redirecting them to other websites”.

“Anytime a user clicks on a link, the extensions send information about the click to the attacker's control server, which can optionally send a command to redirect the victim from the real link target to a new hijacked URL before later redirecting them to the actual website they wanted to visit. User's privacy is compromised by this procedure since a log of all clicks is being sent to these third-party intermediary websites,” Avast researchers explained.

The malware on the browser extensions stole people's personal data such as birth dates, email addresses and active devices.

Also Read: Google Play Store is the largest distributor of malware on Android devices

“The actors also exfiltrate and collect the user's birth dates, email addresses, and device information, including first sign in time, last login time, name of the device, operating system, used browser and its version, even IP addresses (which could be used to find the approximate geographical location of the user),” the researchers added.

Avast researchers are of the opinion that the objective behind this malware is to monetise the traffic. They also believe that while the Avast Threat Intelligence team had started monitoring the threat in November 2020, the malware in Google Chrome and Microsoft Edge browser extensions could have been active for years without anyone noticing.

“The extensions' backdoors are well-hidden and the extensions only start to exhibit malicious behavior days after installation, which made it hard for any security software to discover,” said Jan Rubín, Malware Researcher at Avast.

The blog was published on December 16 and researchers mentioned in it that the infected extensions were still available for download at the time of publishing.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

First Published Date: 18 Dec, 14:40 IST
NEXT ARTICLE BEGINS