More than 5 contaminated and suspicious Google Chrome -based extensions were identified

John Tuckner, security researcher by Secure Annex, has recently identified four malicious Google Chrome browser plugins that can intercept or even execute users’ activities. According to the Bleepingcomputer website, although many of these extensions are no longer available in the official Chrome Web Store store, their total downloads have reached more than 5 million times.

The most popular of these extensions is Cuponomia: Coupons and Cashback, which has more than 5,000 users. Subsequently, the Fire Shield Extension Protection Plugins and Total Safety for Chrome are next with about 5,000 users. The full list of these extensions is published in a Google Sheets file that users can refer to for further review. Many users have been encouraged to download these extensions with deceptive promises, such as increasing security or the possibility of real money, through suspicious advertising or websites. However, malicious extensions that were released directly through the Chrome Web Store have now been removed. But it is still difficult (and perhaps impossible) to deal with extensions that are broadcast through other sources.

If you are suspected of installing a plugin or you think you have installed one of these plugins, it is advisable to delete it immediately and change the password of all accounts that may be affected. Finally, always keep in mind that when installing the plugins, you will be careful about the number of installations, users’ comments and permits that the plugin asks you and only use valid sources.