CERT-In wants you to delete these Google Chrome extensions immediately

Google has recently removed at least 106 Chrome extensions that were identified as a threat to user privacy after being caught collecting sensitive user data. Cybersecurity firm Awake Security had identified 111 Chrome extensions and alerted Google about the same and out of these 111 extensions, Google took down 106.
In order to alert internet users about this, the Indian Computer Emergency Response Team (CERT-In) has issued an advisory. “These extensions reportedly posed as tools to improve web searches, convert files between different formats, as security scanners, and more. It has also been found that these extensions contained code to bypass Google’s Chrome Web Store security scans. They had the ability to take screenshots, read the clipboard, harvest authentication cookies or grab user keystrokes to read passwords and other confidential information,” said CERT-In in its advisory.
CERT-In further recommended that people should delete these Google Chrome extensions immediately. “Uninstall extensions with IDs given in the IOCs section (List can be found on CERT-In website.

Read more

You may also like

More in IT

Comments are closed.