Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users

Topic

New Reply

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/malicious-cookie-stuffing-chrome-extensions-with-1-4-million-users/

A few months ago, we blogged about malicious extensions redirecting users to phishing sites and inserting affiliate IDs into cookies of eCommerce sites. Since that time, we have investigated several other malicious extensions and discovered 5 extensions with a total install base of over 1,400,000..

Netflix Party | 800,000 downloads
Netflix Party 2 | 300,000 downloads
Full Page Screenshot Capture – Screenshotting | 200,000 downloads
AutoBuy Flash Sales | 20,000 downloads

Apart from offering the intended functionality, the extensions also track the user’s browsing activity. Every website visited is sent to servers owned by the extension creator. They do this so that they can insert code into eCommerce websites being visited. This action modifies the cookies on the site so that the extension authors receive affiliate payment for any items purchased…

https://www.youtube.com/watch?v=-N7MW8tJBvQ

Reply | Quote

Replies

also here from a few weeks back

Windows - commercial by definition and now function...

1 user thanked author for this post.

Alex5723

Reply | Quote