108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users
A cluster of 108 Google Chrome extensions has been found to communicate with the same command-and-control (C2) infrastructure in a recent campaign, according to cybersecurity researchers. The campaign's objective is to gather user data and enable browser-level abuse by inserting advertisements and arbitrary JavaScript code into each page visited.
The extensions have accumulated over 20,000 installs in the Chrome Web Store and are published under five different publisher identities: Yana Project, GameGen, SideGames, Rodeo Games, and InterAlt, according to Socket.
According to an investigation by security researcher Kush Pandya, all 108 send stolen passwords, user identities, and browsing data to servers under the control of the same operator.
Of these, 45 extensions have a global ...