Users of Google’s widely used Chrome web browser are facing a serious security threat that should not be overlooked. Several extensions containing malware have emerged, potentially enabling hackers to spy on users’ online activities and steal sensitive information.
A team at Koi Security discovered these malicious extensions, which employ a deceptive strategy to avoid detection. Initially, the extensions appear clean of viruses upon download. However, after installation, hackers inject spyware to collect data at a later time.
This security concern impacts over 2 million individuals. A total of 18 Chrome extensions have been identified with malware, some of which received positive reviews and were even featured on Google’s Chrome store.
The affected extensions span various categories such as emoji keyboards, weather services, YouTube enhancements, and more. The list includes:
- Emoji keyboard online (Chrome)
- Free Weather Forecast (Chrome)
- Unlock Discord (Chrome)
- Dark Theme (Chrome)
- Volume Max (Chrome)
- Unblock TikTok (Chrome)
- Unlock YouTube VPN (Chrome)
- Geco colorpick (Chrome)
- Weather (Chrome)
- Unlock TikTok (Edge)
- Volume Booster (Edge)
- Web Sound Equalizer (Edge)
- Header Value (Edge)
- Flash Player (Edge)
- Youtube Unblocked (Edge)
- SearchGPT (Edge)
- Unlock Discord (Edge)
If you suspect you have installed any of these extensions, it is crucial to take immediate action. Security experts at Malwarebytes recommend clearing browsing data promptly to eliminate any stolen tracking identifiers or session tokens set by the malicious extensions.
Chrome users are advised to monitor account activity for suspicious behavior and enable two-factor authentication. Additionally, resetting the browser settings to default is recommended to reverse any alterations made by the extensions.
Google has confirmed the removal of all affected extensions, ensuring new users are safe from infection.
At Reach and our affiliated entities, we utilize cookies and other identifiers to enhance site experience, analyze usage patterns, and deliver personalized ads. To opt out of data sharing, click the “Do Not Sell or Share my Data” button at the bottom of the webpage. By using our services, you consent to our cookie usage and privacy practices detailed in our Privacy Notice and Cookie Policy.
