Security News > 2020 > December > Ad-injecting malware hijacks Chrome, Edge, Firefox

When searching for things online, has a greater number of ads than usual been popping up at the top of your search results? If it has, and you're using Microsoft Edge, Google Chrome, Yandex Browser, or Mozilla Firefox, you might have fallen prey to the ad-injecting Adrozek malware.
Modifying browser extensions by adding malicious scripts to them, which fetch additional scripts to injecting advertisements into search results.
Modifying browser's security settings/preferences to add permissions that enable the malicious extensions to have more control over Chrome APIs, or to prevent the browsers from being updated with the latest versions.
"Adrozek is installed on devices through drive-by download," Microsoft explained.
"Considering the massive infrastructure that was used to distribute this threat on the web, users should also educate themselves about preventing malware infections and the risks of downloading and installing software from untrusted sources and clicking ads or links on suspicious websites," Microsoft added.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/Ri7rlbqt_QE/
Related news
- Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking (source)
- Firefox continues Manifest V2 support as Chrome disables MV2 ad-blockers (source)
- Google Cuts Off uBlock Origin on Chrome as Firefox Stands Firm on Ad Blockers (source)
- Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability (source)
- After Chrome patches zero-day used to target Russians, Firefox splats similar bug (source)