Three million users installed 28 malicious Chrome or Edge extensions

From zdnet.com

concept-of-malware-notification-or-error-red-alert-warning-of-spam-vector-id11422269351.jpg

More than three million internet users are believed to have installed 15 Chrome, and 13 Edge extensions that contain malicious code, security firm Avast said today.

The 28 extensions contained code that could perform several malicious operations. Avast said it found code to:

  • redirect user traffic to ads
  • redirect user traffic to phishing sites
  • collect personal data, such as birth dates, email addresses, and active devices
  • collect browsing history
  • download further malware onto a user’s device

Read more…