Security News Chrome has a massive copycat extensions problem

frogboy

In memoriam 1961-2018
Thread author
Verified
Top Poster
Well-known
Jun 9, 2013
6,720
You have probably read about the fake Adblock Plus extension that 37000 Chrome users installed before it was removed by Google after it was reported to the company.

The verification system of the Chrome Web Store is automated which means that any extension that passes automatic validation will be published in the store. Google won't do anything about it unless it is reported by users, developers, or security researchers.

There have been plenty of incidents in the past where Chrome extensions would be used to inject ads, hijacked, updated and then misused, or run crypto mining operations.

We talked about precautions that users should take before installing Chrome extensions in 2014, how to verify extensions for Chrome, and about the Chrome fake application problem in 2015.

Nothing has changed on Google's side of things. Chrome extension submissions are still vetted automatically only, and incidents like the recent fake Adblock Plus extension that found its way into the store highlight that the protection can be bypassed. The extension was listed for weeks in the store, and it was used apparently to display aggressive advertising campaigns.

Read more. Chrome has a massive copycat extensions problem - gHacks Tech News
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top