Microsoft takes down malicious extension from the Edge Add-ons Store

[Gandalf_The_Grey]

Microsoft takes down malicious extension from the Edge Add-ons Store:

Back in December, Microsoft Edge Addon Store went live for the public with around 160 extensions. Since then, the number has grown and in March, it passed 1,000 extensions. However, not all the extensions were created in good faith.

Back in April, developer of the popular dark mode extension published a blog post cautioning users about the malicious extensions published on the Edge Add-on Store with the same name. The developer reached out to Microsoft has shared information regarding the malicious extensions and how to quickly analyse the code and remove extensions. It looks like the company followed through, as last night the developer confirmed the removal of various extensions from the Add-on Store.

The developer also confirmed that similar attacks happened on Chrome and Firefox as well. However, both Mozilla and Microsoft removed the malicious extensions but it’s worth checking if you’re using the right extension. Microsoft recently added user ratings and reviews to the Edge Add-on Store so it’s a good idea to check those before downloading and installing a new extension.

Microsoft takes down malicious extension from the Edge Add-ons Store

Back in December, Microsoft Edge Addon Store went live for the public with around 160 extensions. Since then, the number has grown and in March, it passed

mspoweruser.com

ATTENTION! Install Dark Reader only from verified sources – Dark Reader blog

Some hackers created malware that was pretending to be Dark Reader, and released under different names for Firefox and Edge. Follow this guide to learn how to avoid malicious extensions, and how to check that you've installed Dark Reader from the original source.

darkreader.org

 

[blackice]

So I guess the Microsoft extension store isn’t really safer than the Chrome store.

 

[ForgottenSeer 85179]

So I guess the Microsoft extension store isn’t really safer than the Chrome store.

Let's see. To be fair it's still new

 

[Arequire]

Microsoft recently added user ratings and reviews to the Edge Add-on Store so it’s a good idea to check those before downloading and installing a new extension.

Not the best advice. Relying on reviews might work for extensions that display ads or redirect users to other sites, but a lot of malicious extensions function as advertised on the store page and perform their malicious activity in the background. No regular user is going to be able to identify it conducting click fraud or siphoning the data they enter into form fields.

 

[oldschool]

A simple strategy, among others, is to keep installed extensions to a minimum.

 

[Gandalf_The_Grey]

A simple strategy, among others, is to keep installed extensions to a minimum.

Good but difficult to follow advice

Now I have six extensions installed could go by two, only an adblocker and a password manager, but I don't want that... love them all

 

[ForgottenSeer 85179]

Good but difficult to follow advice

Now I have six extensions installed could go by two, only an adblocker and a password manager, but I don't want that... love them all

Not so hard as you believe.
I only use AdGuard & uMatrix

Also you can remove the Cookie addon as AdGuard provide filterlists for cookie banner if you realy want break websites
Certificate Info doesn't increase your security. If you want check sites, you can easy use sites like SSLLabs.com
I also don't think that you need TrafficLight

 

[oldschool]

And users may check WebStore extensions @ CRXcavator

 

[Gandalf_The_Grey]

Not so hard as you believe.
I only use AdGuard & uMatrix

Also you can remove the Cookie addon as AdGuard provide filterlists for cookie banner if you realy want break websites
Certificate Info doesn't increase your security. If you want check sites, you can easy use sites like SSLLabs.com
I also don't think that you need TrafficLight

Of course, you are right, I will try to survive the upcoming week with just three extensions: uBlock Origin, LastPass: and Microsoft Editor.

 

[ForgottenSeer 85179]

uBlock Origin

Why if you already using the (better) AdGuard?

Or did you mean:
"Of course, you are right, I will try to survive the upcoming week with just three extensions: AdGuard, LastPass: and Microsoft Editor."
Then that sounds good

 

[Gandalf_The_Grey]

Why if you already using the (better) AdGuard?

Or did you mean:
"Of course, you are right, I will try to survive the upcoming week with just three extensions: AdGuard, LastPass: and Microsoft Editor."
Then that sounds good

I'm not sure which one is better... why do you prefer AdGuard?

 

[ForgottenSeer 85179]

I'm not sure which one is better... why do you prefer AdGuard?

Better UI, anti tracking (URL ID e.g.) features, more maintainer power & natively available in edge store (uBlock origin is only available from another unofficial guy as Gorhill doesn't care about Edge)

 

[plat]

I use uBlock Origin in chromium Edge, it's by Mr. Gorhill. I got it from the Chrome Web Store. Legacy Edge, now that one I don't really care about and would rather use AdGuard there myself.

Here is a listing of most of the popular filter lists and what extension/s they can be added to. AdGuard or uBlock O or Nano or some others, it's mostly in there.

FilterLists | Subscriptions for uBlock Origin, Adblock Plus, AdGuard, ...

FilterLists is the independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances. By Collin M. Barrett.

filterlists.com

 

[SeriousHoax]

Why if you already using the (better) AdGuard?

Better UI, anti tracking (URL ID e.g.) features, more maintainer power

I think it's not fair to say one is better than the other. They are different in some ways and some things like UI is subjective. Personally I like uBlock Origin's UI more than Adguard. The advanced mode in uBlock Origin is very helpful and can show you what site has been blocked instantly without reloading the page and opening logs unlike Adguard, possible to upgrade one specific filter instead of all, can clear cache also. uBO by default disables network prefetching, hyperlink auditing, can sync extension settings to the browser sync, can be used to block scripts, frames, third party fonts, media over a certain size, better element picker, less resource usage, unlock cname to block ad/tracker domains (Firefox only) and also arguable faster and doesn't slow down even when loads of filters are imported. Its third party script blocking ability also made me ditch uMatrix which I used for almost two years. One the other hand Adguard has extra features like Stealth mode for stripping some tracking parameters, referrer hiding, delete first and third party cookies, decent phishing and malware protection. Btw, Adgaurd's Phishing and malware protection is not the same as Google safe browsing which many of you may think. They use that API but their data is different. It's most of the time better than safe browsing but I've seen it missing a lot that safe browsing blocks.
Anyway, my point is it's not just plain and easy to say that one is better the other. Both are great and has its unique useful features. A user can use any of the two depending on his/her requirements.

 

[Tutman]

So I guess the Microsoft extension store isn’t really safer than the Chrome store.

I don't use the microsoft extension store, I have been going straight to the chrome store. (They have more options)