Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Share Post: Reddit Facebook
Chrome Extension Developers Under a Barrage of Phishing Attacks
#1
Quote:EXCLUSIVE — Google's security team has sent out warnings via email to Chrome extension developers after many of them have been the targets of phishing attacks, some of which have been successful and resulted in crooks taking over extensions.

These phishing attacks have come into the limelight this past week when phishers managed to compromise the developer accounts for two very popular Chrome extensions — Copyfish and Web Developer.

The phishers used access to these developer accounts to insert adware code inside the extensions and push out a malicious update that overlaid ads on top of web pages users were navigating.

Phishing attacks have been going on since mid-June
According to new information obtained by Bleeping Computer, these attacks started over two months ago and had been silently going on without anyone noticing.

All phishing emails contained the same lure — someone posing as Google was informing extension developers that their add-on broke Chrome Web Store rules and needed to be updated.

The extension developer was lured onto a site to view what was the problem and possibly update the extension. Before seeing the alert, the site asked extension developers to log in with their Google developer account, a natural step when accessing a secure backend.

The login page was identical to the real Google account login page, and this is how the owners of the Copyfish and Web Developer extensions compromised their accounts.

Read the full article HERE
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Microsoft Warns of Widespread Open Redirects Phishing Attacks tarekma7 0 522 09-04-2021 , 02:58 PM
Last Post: tarekma7
  10K Targeted in Phishing Attacks Spoofing FedEx, DHL Express Bjyda 0 1,029 02-23-2021 , 11:16 PM
Last Post: Bjyda
  Apple was the most imitated brand for phishing attacks in Q1 2020 sidemoon 0 1,288 04-14-2020 , 09:05 PM
Last Post: sidemoon
  Fifteen year old malware still being used in phishing attacks dhruv2193 0 1,758 07-28-2019 , 06:31 AM
Last Post: dhruv2193
  Office 365 Phishing Attacks Are on the Rise Mohammad.Poorya 0 2,162 06-22-2019 , 08:25 PM
Last Post: Mohammad.Poorya

Forum Jump:


Users browsing this thread: 1 Guest(s)