There has been a warning issued to more than 3.2 million Google Chrome users after 16 Chrome extensions have been compromised1. These extensions span multiple uses such as screen capture, ad blockers and emoji keyboards.

 

What is a Chrome Extension?

A chrome extension is like a small, add-on tool that you can install in your Google Chrome browser to do extra things that normally the browser can’t, like blocking ads, changing how webpages look or adding extra features to help you work more efficiently.

 

What’s the risk?

It has been reported that cyber criminals have inserted malicious codes into the software of 16 widely used Chrome extensions. The malicious codes allow the hackers to steal user data and commit ‘search engine fraud’. Search engine fraud refers to an online tactic where scammers manipulate search engine algorithms to make their malicious websites appear at the top of search results, tricking users into clicking on them and giving away sensitive information.

 

Compromised Extensions

Emojis Mike Adblock für Chrome KProxy
Blipshot Super Dark Mode Page Refresh
Color Changer for YouTube Emoji Keyboard Emojis for Chrome. Wistia Video Downloader
Video Effects for YouTube and Audio Enhancer Adblocker for Chrome Nimble Capture
Themes for Chrome Adblock for You YouTube Picture in Picture

 

What should you do?

To ensure web safety it is advised that Chrome users carefully read through the permission settings of any extension that they want to install. Be extra careful when granting permission to an extension to allow it to read and change all data on all websites, these permissions are often not necessary and if attached to a malicious extension they can compromise your browser.

 

Microsoft Edge vs Chrome

Cyber-attacks such as this can make you question the security of the technology you’re using. When it comes to browsers, we recommend Microsoft Edge due its enhanced privacy and protection for its users. What’s more, if you’re using the full Microsoft 365 suite there are benefits of better integration and seamless workflows. Edge is designed to work seamlessly with Microsoft 365 applications like Word, Excel and PowerPoint, allowing you to quickly access recent documents and files directly from the browser sidebar.

If you need help with implementing Microsoft 365 into your business, contact us!  As a trusted Microsoft Solutions Partner, we can help with both implementing and supporting Microsoft 365 solutions.

 

  1. Tech Note – Malicious browser extensions impacting at least 3.2 million users – GitLab Security Tech Notes