Stay updated with breaking news from Malicious Browser Extensions. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
More than 1.4 million devices have been installed with a set of malicious Google Chrome extension More than 1. 4 million devices have been installed with a set of malicious Google Chrome extensions.
The company found no evidence of the extensions being used as a bridge into corporate networks, but attackers may have the ability to download and inject arbitrary JavaScript into any tab, says Jan Rubín, a malware researcher at Avast. "This could be used to gather credentials and other sensitive corporate data from the websites visited by the victim," he says. "We are preparing a technical blog post with more technical information and IoCs, but for now, we can share the ... malicious domains." The malicious extensions are the latest attempt by cybercriminals to hide code in add-ons for popu...