时间:2025-05-09 17:06:26 来源:网络整理编辑:百科
Some 37,000 people downloaded a spam version of the "AdBlock Plus" extension from Google after a fra
Some 37,000 people downloaded a spam version of the "AdBlock Plus" extension from Google after a fraudulent ad blocking extension snuck through Google Chrome's verification process and appeared in the Chrome Web Store yesterday.
It's easy to see why Google (and some 37,000 people) were tricked — the developer who packaged the adware into an extension used the name of an already popular and legitimate extension, AdBlock Plus.
SEE ALSO:Whoops, a hacker found a way to steal your passwords from macOS High SierraAdditionally, the bogus page in the Chrome store came with reviews. In short, the fraudulent extension looked pretty realistic. Twitter user SwiftOnSecurity, who regularly tweets about web security, posted an image of the devious extension:
Google allows 37,000 Chrome users to be tricked with a fake extension by fraudulent developer who clones popular name and spams keywords. pic.twitter.com/ZtY5WpSgLt
— SwiftOnSecurity (@SwiftOnSecurity) October 9, 2017
Google eventually caught wind of the breach and removed the deceitful adware, but it remains unclear just how harmful the malware is for those who already downloaded the extension. At least one unfortunate user says they're being hit with ads. In a screenshot of a review, posted by SwiftOnSecurity, the user states that the "instant this was added to Chrome started getting invasive ads with high volume levels opening new tabs."
Though Google took down the adware, SwiftOnSecurity was unimpressed by Google's failure to stop this malware from sneaking through and ending up conspicuously displayed in the Chrome store in the first place:
Legitimate developers just have to sit back and watch as Google smears them with fake extensions that steal their good name pic.twitter.com/3Tnv4NtY9t
— SwiftOnSecurity (@SwiftOnSecurity) October 9, 2017
The 37,000 infected users probably hope this public shaming further motivates Google to buffer the Chrome store's verification process. After all, malicious developers will only get more inventive if the problem isn't fixed.
TopicsCybersecurity
Tourist survives for month in frozen New Zealand wilderness after partner dies2025-05-09 16:57
50 Shades of No: A new t2025-05-09 16:29
Donald Trump thinks he's the first person to come up with movie ratings2025-05-09 15:55
Apple Watch Series 3 now tracks skiing and snowboarding performance2025-05-09 15:51
'The Flying Bum' aircraft crashes during second test flight2025-05-09 15:47
Arctic warm event stuns scientists, as record warmth reaches North Pole2025-05-09 15:39
You'll see much more of Erica in 'Stranger Things' Season 32025-05-09 15:30
Tiffany Haddish re2025-05-09 15:01
Richard Branson 'thought he was going to die' in bike accident2025-05-09 14:48
Why Maybelline deleted a tweet about abandoning Snapchat for Instagram2025-05-09 14:35
U.S. pole vaulter skids to a halt for national anthem2025-05-09 17:05
Even Fox News is embarrassed by this rap video made by Utah lawmakers2025-05-09 17:03
Official FCC order overturning net neutrality to be published Thursday2025-05-09 16:59
These old 'Simpsons' sketches are everything you need and more2025-05-09 16:15
J.K. Rowling makes 'Harry Potter' joke about Olympics event2025-05-09 15:50
Google testing new Material design for search results, says report2025-05-09 15:18
Arctic warm event stuns scientists, as record warmth reaches North Pole2025-05-09 15:08
Stormzy fires furious freestyle against UK Prime Minister Theresa May2025-05-09 14:48
Mall builds real2025-05-09 14:45
Manafort's PDF conversion confusion becomes evidence in Mueller probe2025-05-09 14:32