Hackers Hijack Google Chrome Extensions

A recent sophisticated phishing campaign has compromised at least 35 Google Chrome extensions, potentially affecting over 2.6 million users. This attack targeted developers, injecting malicious code into extensions that could steal Facebook account data.

Let’s focus on what’s an extension and how do I know if I have one?
​

---

A browser extension is a small software program that adds new features or modifies existing behavior of a web browser like Chrome, Edge, Firefox, or Safari. Think of them like apps for your browser.

They can have many uses including: 

• Block ads: Prevent annoying advertisements from appearing on websites.
• Manage passwords: Securely store and automatically fill in your passwords.
• Improve productivity: Offer tools for note-taking, translation, or task management.
• Enhance security: Provide additional layers of protection against malware and phishing.
• Customize the browsing experience: Change the appearance of websites, add new features, or integrate with other services.

In Chrome look for a jigsaw puzzle piece on the top right of your window header.

Do you have any extensions?
The easiest way to find out is to check your browser's extension management page. Here's how for the most popular browsers:

• Google Chrome:
  1. Click the three vertical dots (More) in the top right corner of the browser.
  2. Go to "More tools" > "Extensions." Or, you can type chrome://extensions in the address bar and press Enter.
• Microsoft Edge:
  1. Click the three horizontal dots (Settings and more) in the top right corner.
  2. Go to "Extensions." Or, you can type edge://extensions in the address bar and press Enter.
• Mozilla Firefox:
  1. Click the three horizontal lines (Menu) in the top right corner.
  2. Go to "Add-ons and themes" > "Extensions." Or, you can type about:addons in the address bar and press Enter.
• Safari (Mac):
  1. In the menu bar at the top of the screen, click "Safari."
  2. Select "Safari Extensions."

​On these pages, you'll see a list of all the extensions you have installed. You can also disable or remove extensions from these pages.

If you find extensions you don't recognize or don't remember installing, it's a good idea to disable or remove them, especially after reading about the recent phishing campaign targeting developers. It's always best to be cautious and only use extensions from trusted sources.

How to Stay Safe:

• Developers: Be cautious of unsolicited emails, even related to Chrome Web Store policies. Verify sender addresses and avoid clicking suspicious links. Consider two-factor authentication with a strong key.
• Users: Only install extensions from trusted sources. Check reviews and ratings before installing. Be wary of sudden changes in extension behavior. Consider searching for alternative extensions if you suspect a compromise.

​This attack highlights the importance of developer vigilance and user caution when installing Chrome extensions. Chrome users should review their installed extensions and remove any they no longer trust. Staying informed and practicing good online security habits remains key to protecting yourself from evolving threats.

​

Ep277

Image created by AI