If you're using Google Chrome on your PC, then you may want to check your browser ASAP and delete any harmful extensions.
Hackers can use these Chrome extensions to eavesdrop on your web surfing sessions and possibly steal your sensitive information, experts from Koi Security revealed. The scam has already impact 2.3 million users across Chrome and Microsoft Edge.
A total of 18 Chrome and Edge extensions with this malware have been revealed so far, many of which were disguised as productivity and entertainment tools. Google has taken action to remove the infected extensions from its Chrome store, but you'll need to delete them manually from your own web browser.
Categories for these extensions include emoji keyboards, video speed controllers, weather forecasts, volume boosters, VPN proxies for Discord and TikTok, YouTube unblockers, and dark themes.
- Unlock Discord (Chrome)
- Dark Theme (Chrome)
- Volume Max (Chrome)
- Unblock TikTok (Chrome)
- Unlock YouTube VPN (Chrome)
- Geco Colorpick (Chrome)
- Weather (Chrome)
- Unlock TikTok (Edge)
- Volume Booster (Edge)
- Web Sound Equalizer (Edge)
- Header Value (Edge)
- Flash Player (Edge)
- YouTube Unblocked (Edge)
- SearchGPT (Edge)
- Unlock Discord (Edge)
Each harmful extension successfully worked under the radar in only four steps:
- Captured the URL of the page you're visiting
- Sent it to a remote server log with the accompanying unique tracking ID
- Received redirect URLs from the server
- Redirected your browser automatically if commanded
Sora/GB News
|A Harmful malware extension is detected on Google Chrome browser
Koi Security dubbed this campaign as RedDirection all because the deceit of the malware hid in plain sight.
For example, if you're sent a Microsoft Teams meeting invite and click the link, a damaging extension will intercept your request and redirect you to an unassuming page claiming to be a software in order to join. While you download to what appears to be an update is actually the malware compromising your device.
LATEST DEVELOPMENTS
- Samsung's first triple-folding phone could release by end of year
- Virgin Media TV viewers warned BBC iPlayer could STOP working this month
- Best Sky Stream deals
If any of the listed extensions have been found on your device, not only are you advised to remove them, but also change any passwords and other sensitive auto-fill data.
To remove an extension:
- Access your browser's extension settings (usually through the menu, then "More tools" or "Extensions")
- Locate the suspicious extension, and click "Remove" or "Uninstall"
- Restart your browser
It may also be beneficial to clear your browsing history and run an antivirus scan as a precaution.