Security News > 2022 > August > Browser extension threat targets millions of users

Browser extensions, also called add-ons, are mostly downloaded from official marketplaces or browser providers repositories, such as the Chrome Web Store or the Firefox Add-ons website.

In 2020, 106 browser extensions were removed from the Chrome Web Store, being used to steal user data, take screen captures or even steal credit card information from web forms.

The most common threat spreading via browser extensions is adware, which consists of having code inside the extension to show unwanted advertisements in the browser while the user browses websites.

Figure B. Kaspersky's researchers indicate that adware represents about 70% of the whole browser extension threat.

One of the most dangerous family of malicious browser extensions is currently FB Stealer, aimed at stealing Facebook cookies in addition to changing the search engine.

Once run, it quietly installs the FB Stealer browser extension malware on the computer.

News URL

https://www.techrepublic.com/article/browser-extension-threat-targets-millions-of-users/