Reply to thread

Message

<blockquote data-quote="436880927" data-source="post: 824202">It&#039;s possible - they could have used different accounts under different names and targeted different products to masquerade as. Last time I went on a big hunt for rogue AV extensions, almost all of the cases were too alike to have been coincidental, so my guess was it was the same person behind most or all of them (I&#039;m referring to the internals of the rogue browser extensions as well as how they were presented on the Chrome Web Store).I&#039;ve started routinely doing searches under well-known AV brands so I can try and catch them early-on before innocent users fall victim to them but for now it seems Kaspersky is in the clear.The Chrome Web Store is not designed very well when it comes to monitoring who uploads what because Google doesn&#039;t allow you to see account connections based on factors like IP address (for active accounts on the Chrome Web Store - if they did this, it&#039;d be troublesome though given some people will be using VPNs or proxies) and they do not even allow you to overview the uploads for a particular user.On the Chrome Web Store, anyone can claim the extension is &quot;offered by&quot; anyone it seems - countless times I see bogus &quot;offered by&quot; on extensions where the claim is untrue. Furthermore, there might be an issue of modifying the information post-vetting requirements having been met (as well as the extension).</blockquote>

[QUOTE="436880927, post: 824202"] It's possible - they could have used different accounts under different names and targeted different products to masquerade as. Last time I went on a big hunt for rogue AV extensions, almost all of the cases were too alike to have been coincidental, so my guess was it was the same person behind most or all of them (I'm referring to the internals of the rogue browser extensions as well as how they were presented on the Chrome Web Store). I've started routinely doing searches under well-known AV brands so I can try and catch them early-on before innocent users fall victim to them but for now it seems Kaspersky is in the clear. The Chrome Web Store is not designed very well when it comes to monitoring who uploads what because Google doesn't allow you to see account connections based on factors like IP address (for active accounts on the Chrome Web Store - if they did this, it'd be troublesome though given some people will be using VPNs or proxies) and they do not even allow you to overview the uploads for a particular user. On the Chrome Web Store, anyone can claim the extension is "offered by" anyone it seems - countless times I see bogus "offered by" on extensions where the claim is untrue. Furthermore, there might be an issue of modifying the information post-vetting requirements having been met (as well as the extension). [/QUOTE]

Verification