The
AllBlock Chromium ad blocking extension has been found to be injecting hidden affiliate links that generate commissions for the developers.
This extension is still available on Chrome's Web Store and promotes itself as an ad blocker that focuses on YouTube and Facebook to prevent pop-ups and speed up browsing.
However, according to researchers at Imperva, the extension is actually conducting a deceptive ad-injection campaign that causes legitimate URLs to redirect to affiliate links controlled by the extension's developers.
Ad injection is the process of inserting advertisements or links into a web page that doesn't normally host them, allowing the scammers to make money from advertisements or redirect people to affiliate sites to earn commissions.
In August 2021,
Imperva’s researchers discovered a set of previously unknown malicious domains distributing an ad injection script.
