Read Also: Google Workspace Introduces Duet AI for Personalized Assistance in Writing, Art, and Spreadsheet Organization! Avast's Investigationĭespite warnings, Google had not acted to remove these extensions until cybersecurity firm Avast stepped in.Īvast conducted a thorough investigation and confirmed the malicious nature of these extensions.
But both versions employed the same method of injecting arbitrary JavaScript code through serasearchtopcom.Īlthough Palant did not personally witness any explicit malicious activity, numerous user reports and reviews on the Chrome Web Store suggested that these extensions were responsible for unwanted redirections and search result hijacking. Despite Palant's efforts to report these concerning extensions to Google, they continued to be available for download on the Chrome Web Store.įurther analysis by Palant unveiled two variants of the code, one posing as Mozilla's WebExtension browser API Polyfill, and the other masquerading as the Day.js library. Notable extensions affected by this issue included popular ones such as Autoskip for Youtube, Soundboost, Crystal Ad Block, Brisk VPN, Clipboard Helper, and Maxi Refresher. Palant's investigation took a disconcerting turn when he found the same suspicious code present in 18 other Chrome extensions, with a collective download count of 55 million. Although no explicit evidence of malicious activity was observed, the true intentions behind the code remained shrouded in mystery. The potential consequences of such actions ranged from injecting ads into webpages to potentially compromising sensitive information.
0 kommentar(er)
