A newly discovered spyware effort attacked users through 32
million downloads of extensions to Google’s market-leading Chrome web browser,
researchers at Awake Security told Reuters, highlighting the tech industry’s
failure to protect browsers as they are used more for email, payroll and other
sensitive functions.
Alphabet Inc’s (GOOGL.O) Google said it removed more than 70
of the malicious add-ons from its official Chrome Web Store after being alerted
by the researchers last month.
“When we are alerted of extensions in the Web Store that
violate our policies, we take action and use those incidents as training
material to improve our automated and manual analyses,” Google spokesman Scott
Westover told Reuters.
Most of the free extensions purported to warn users about
questionable websites or convert files from one format to another. Instead,
they siphoned off browsing history and data that provided credentials for
access to internal business tools.
Based on the number of downloads, it was the most
far-reaching malicious Chrome store campaign to date, according to Awake
co-founder and chief scientist Gary Golomb.
Google declined to discuss how the latest spyware compared
with prior campaigns, the breadth of the damage, or why it did not detect and
remove the bad extensions on its own despite past promises to supervise
offerings more closely. (Reuters)

Post a Comment
We want to know your comments and concerns. Remember: Respect distinguishes us, education makes us different...