Millions of people spied on by malicious browser extensions in Chrome and Edge

[Corrine]

From Millions of people spied on by malicious browser extensions in Chrome and Edge by Pieter Arntz:

Researchers have discovered a campaign that tracked users' online behavior using 18 browser extensions available in the official Chrome and Edge webstores. The total number of installs is estimated to be over two million.

These extensions offered functionality, received good reviews, touted verification badges, and some even enjoyed featured placement.

But when an extension has been available in the web store for a while, cybercriminals can insert malicious code through updates to the extension. Some researchers refer to the clean extensions as "sleeper agents." These sleeper agents are the bases for future malicious activity.

See the referenced article for additional information, including the list of extensions and what to do.

[DR M]

Volume Max/Volume Booster are used in schools...

[winchester73]

Good stuff by Metallica, as usual

[plodr]

This is reassuring:

Run a full system Malwarebytes scan to check for additional infections. This will also allow you to remove all affected extensions from Chrome and Edge. Malwarebytes blocks these domains so our users are safe.