North Korean Hackers Targeting Researchers with Malware
A cyber security researcher has discovered a malicious Google Chrome extension in the wild abusing the Chrome Sync process that can help hackers steal user data.
Hackers can use the Google Chrome sync feature to send commands to infected browsers and steal data from infected systems, bypassing traditional firewalls and other network defenses.
Croatian security researcher Bojan Zdrnja found a malicious Chrome extension that can communicate with a remote command and control (C&C) server and as a way to exfiltrate data from infected browsers, reports ZDNet.
Google has added the much-needed Mute site feature in the latest Chrome 64 update.Google
Google cuts Chromium off from sync features and Google APIs – OSnews osnews.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from osnews.com Daily Mail and Mail on Sunday newspapers.
Google
Google plans to revoke others Chromium-based browsers access to a long list of APIs that power such popular services as bookmark and settings synchronization. We discovered that some third-party Chromium-based browsers were able to integrate Google features, such as Chrome Sync and Click to Call, that are only intended for Google s use, Jochen Eisinger, Chrome engineering director, wrote in a Jan. 15 post to a company blog.
Access to what Eisinger labeled our private Chrome APIs will be blocked starting March 15.
Although Eisinger mentioned only two APIs by name Google Sync and Click to Call as effected by the new rule, a link he offered led to a page that lists 20 APIs, including those for calling on services like Google Translate and Safe Browsing. The latter warns users when they try to steer to potentially dangerous websites.
Google to remove sync support from 3rd-party Chromium browsers daijiworld.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from daijiworld.com Daily Mail and Mail on Sunday newspapers.