Security News > 2020 > June > Over 100 New Chrome Browser Extensions Caught Spying On Users

Google recently removed 106 more extensions from its Chrome Web Store after they were found illegally collecting sensitive user data as part of a "Massive global surveillance campaign" targeting oil and gas, finance, and healthcare sectors.

The extensions in question posed as utilities offering capabilities to convert files from one format to the other, among other tools for secure browsing, while relying on thousands of fake reviews to trick unsuspecting users into installing them.

In total, the extensions were downloaded nearly 33 million times over the course of three months before Awake Security reached out to Google in May. The search giant, in response to the disclosures, has deactivated the problematic browser extensions.

Deceptive extensions on the Chrome Web Store have continued to be a problem, what with bad actors exploiting it for malvertising and other data-stealing campaigns.

It's recommended that users review extension permissions by visiting "Chrome://extensions" on the Chrome browser, consider uninstalling those that are rarely used, or switch to other software alternatives that don't require invasive access to browser activity.

News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/dwpvS0xDYcg/chrome-browser-extensions-spying.html