Forum Security-X > News

[SecListe]Think twice before installing Chrome extensions

(1/1)

igor51:
Think twice before installing Chrome extensions

<p>Since November 2011, according to recent statistics, Google Chrome has become the most popular browser in Brazil (more than 45% of the market share).</p><p><p class=c><img src="images/pictures/klblog/208193416.png" border="1" alt="" title=""></p><p><p>The same has is true for Facebook, which now is the most popular social network in Brazil, with a total of 42 million users, displacing Orkut.</p><p><p>These two facts are enough to motivate Brazil’s bad guys to turn their attentions to both platforms. This month we saw a huge wave of attacks targeting Brazilian users of Facebook, based on the distribution of malicious extensions. There are several themes used in these attacks, including “Change the color of your profile” and “Discover who visited your profile” and some bordering on social engineering such as “Learn how to remove the virus from your Facebook profile”:</p><p><p> <p class=c><img src="images/pictures/klblog/208193417.png" border="1" alt="" title=""></p> <p class="c"; style="font-size:8pt;"><b> 1) Click on Install app, 2) Click on Allow or Continue, 3) Click on Install now, After doing these steps, close the browser and open again</b></p> <p><p><p>This last one caught our attention not because it asks the user to install a malicious extension, but because <b><span style="font-weight: bold; color: rgb(153, 0, 0);">the malicious extension it’s hosted at the official Google's Chrome Web Store</span></b>. If the user clicks on <i>“Install aplicativo”</i> he will be redirected to the official store. The malicious extension presents itself as “Adobe Flash Player”:</p><p><p class=c><img src="images/pictures/klblog/208193418.png" border="1" alt="" title=""></p>
Source: Think twice before installing Chrome extensions

Navigation

[0] Index des messages