Hundreds of extensions were recently discovered to be secretly uploading private user data to servers controlled by attackers. Researchers identified 71 different extensions with over 1.7 million downloads globally. These malicious extensions were presented as real tools and exposed for being involved with ad fraud and “malvertising.” The extensions redirected the user’s browser to fake ads from various company and were designed to capture personal data from unknowing users. Researchers warn users to do their research when looking for new extensions to install for their browser. Many of these tools could be harmful and leak sensitive personal data if they are ran by malicious providers.
Full Article: https://arstechnica.com/information-technology/2020/02/500-chrome-extensions-secretly-uploaded-private-data-from-millions-of-users/