Chrome extensions with 1 million installs hijack targets’ browsers

CyberTech

Level 44
Thread author
Verified
Top Poster
Well-known
Forum Veteran
Nov 10, 2017
3,130
1
22,976
4,269
Researchers at Guardio Labs have discovered a new malvertizing campaign pushing Google Chrome extensions that hijack searches and insert affiliate links into webpages.

Because all these extensions offer color customization options and arrive on the victim's machine with no malicious code to evade detection, the analysts named the campaign "Dormant Colors."

According to the Guardio report, by mid-October 2022, 30 variants of the browser extensions were available on both the Chrome and the Edge web stores, amassing over a million installs.

Full article