Key Takeaways:
- 1. Attackers exploited trust markers like install counts and user reviews to spread malware through browser extensions listed on Chrome and Edge Web Stores.
- 2. Malicious code was injected into legitimate extensions after gaining user trust through positive reviews and reputation building.
- 3. Users are advised to remove affected extensions, clear browser data, run malware scans, and monitor online accounts for suspicious activity.
Researchers uncovered a campaign where 18 browser extensions listed on official Chrome and Edge Web Stores tracked users' online activity. Attackers used long-term tactics to insert malicious scripts into legitimate extensions after gaining trust. Over 2 million installations were affected. Users are urged to remove malicious extensions, clear browser data, run malware scans, and monitor accounts for suspicious activity.
Insight: Browser extensions can pose hidden risks, as even trusted tools can turn malicious. It is crucial to stay vigilant, review extensions regularly, and use strong antivirus protection to safeguard personal data and browsers.
This article was curated by memoment.jp from the feed source: Fox Scitech.
Read the full article here: https://www.foxnews.com/tech/malicious-browser-extensions-caught-spying-2-million-users
© All rights belong to the original publisher.