Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Share Post: Reddit Facebook
Google removes two Chrome ad blocker extensions caught 'cookie stuffing
#1
Quote:Google has removed today two extensions from the Chrome Web Store. The two extensions were fully functional ad blockers, but they tried to deceive users by using the names of other more reputable ad blocker extensions.
But besides using misleading names to hijack and deceive other extensions' userbases, the two -- "AdBlock" by "AdBlock, Inc" and "uBlock" by "Charlie Lee" -- were also caught performing cookie stuffing.
Cookie stuffing is an old technique where a website or browser extension adds extra information to a user's cookie. The technique is often used in affiliate marketing to hijack traffic from its legitimate source.
This malicious behavior would only start 55 hours after installation, and would cease if users opened Chrome's Developer Tools, said Andrey Meshkov, co-founder and CTO of AdGuard, and the one who discovered the shady behavior in both extensions.

Both extensions were based on the code of the original "AdBlock" extension and appeared to be a used as a wireframe for the malicious code.
[Image: FBnr7f3.png]

Full Read : https://www.zdnet.com/article/google-rem...-stuffing/
Reply
#2
[Image: FBnr7f3.png]


Thanks for the info Herran. The first extension had more than 800,000 installs, while the second had over 850,000.
Reply
#3
Thanks for the information!

I should AdBlock and AdGuard. Whether to remove AdBlock?
Reply
#4
(09-22-2019 , 01:18 PM)Mike Wrote: [Image: FBnr7f3.png]


Thanks for the info Herran. The first extension had more than 800,000 installs, while the second had over 850,000.

If the user doesn't pay attention to the details this is what happens. Not saying that Google shouldn't check these extensions periodically.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  It was a bad week for millions of people who rely on Google for apps and Chrome exten mrtrout 0 681 06-03-2023 , 04:09 AM
Last Post: mrtrout
  Google Chrome emergency update fixes first zero-day of 2023 mrtrout 0 484 04-15-2023 , 07:53 PM
Last Post: mrtrout
  DuckDuckGo removes carve-out for Microsoft tracking scripts after securing policy cha vietnamrum 0 587 12-23-2022 , 01:30 AM
Last Post: vietnamrum
  Google Chrome emergency update fixes 9th zero-day of the year tarekma7 0 600 12-05-2022 , 04:19 PM
Last Post: tarekma7
  PyPI removes 'mitmproxy2' over code execution concerns mrtrout 0 533 10-12-2021 , 10:43 PM
Last Post: mrtrout

Forum Jump:


Users browsing this thread: 1 Guest(s)