Ερευνητές ασφαλείας εντόπισαν 108 επιβλαβή πρόσθετα του Google Chrome, τα οποία φαίνεται να επικοινωνούν με την ίδια υποδομή και ο τελικός τους στόχος είναι η συλλογή προσωπικών δεδομένων με το injecting διαφημίσεων και επιβλαβούς κώδικα JavaScript σε κάθε ιστοσελίδα που επισκέπτεται κάποιος.
Ειδικότερα τα extensions είναι δημοσιευμένα υπό πέντε διαφορετικές οντότητες εκδοτών, και πιο συγκεκριμένα: Yana Project, GameGen, Side Games, Rodeo Games και InterAlt. Σύμφωνα με τον ερευνητής ασφαλείας Kush Pandya όλα φαίνεται να ελέγχονται από τον ίδιο κακόβουλο μέρος.
- Από αυτά τα 54 υποκλέπτουν το Google Account identity μέσω OAuth2
- 45 extensions περιέχουν universal backdoor που ανοίγει επιβλαβή URLs μόλις φορτωθεί ο browser του χρήστη
- ενώ τα υπόλοιπα εμπλέκονται σε ποικίλη επιβλαβή δραστηριότητα, όπως εισαγωγή scripts σε κάθε σελίδα που επισκέπτεται ο χρήστης, αφαίρεση security headers από Youtube και Tiktok όπως Content Security Policy, X-Frame-Options και CORS και εμφάνιση διάφορων gaming overlays και διαφημίσεων.
Ακολουθεί η πλήρης λίστα των επιβλαβών IDs
Chrome Extension IDs
obifanppcpchlehkjipahhphbcbjekfa– Telegram Multi-accountmdcfennpfgkngnibjbpnpaafcjnhcjno– Web Client for Telegram – Telesidemmecpiobcdbjkaijljohghhpfgngpjmk– YouSide – Youtube Sidebarbfoofgelpmalhcmedaaeogahlmbkopfd– Web Client for Youtube – SideYoucbfhnceafaenchbefokkngcbnejached– Web Client for TikTokogogpebnagniggbnkbpjioobomdbmdcj– Text Translationldmnhdllijbchflpbmnlgndfnlgmkgif– Page Lockerlnajjhohknhgemncbaomjjjpmpdigedg– Page Auto Refreshaecccajigpipkpioaidignbgbeekglkd– Web Client for Rugby Rush – SideGameakebbllmckjphjiojeioooidhnddnplj– Formula Rush Racing Gameakifdnfipbeoonhoeabdicnlcdhghmpn– Piggy Prizes – Slot Machineakkkopcadaalekbdgpdikhdablkgjagd– Slot Arabianalkfljfjkpiccfgbeocbbjjladigcleg– Frogtasticalllblhkgghelnejlggmmgjbkdabidie– Black Beard Slot Machineamkkjdjjgiiamenbopfpdmjcleecjjgg– Indian – Slot Machineamnaljnjmgajgajelnplfmidgjgbjfhe– Mahjong Deluxebbjdlbemjklojnbifkgameepcafflmem– Crazy Freekickbdnanfggeppmkfhkgmpojkhanoplkacc– Slot Car Racingbgdkbjcdecedfoejdfgeafdodjgfohno– Clear Cache Plusbnchgibgpgmlickioneccggfobljmhjc– Galactica Delux – Slot Machinebpljfbcejldmgeoodnogeefaihjdgbam– Speed Test for Chrome – WiFi SpeedTestcbnekafldflkmngbgmbnfmchjaelnhem– Game SkySpeedstercdpiopekjeonfjeocbfebemgocjciepp– Master Chesscehdkmmfadpplgchnbjgdngdcjmhlfcc– Hockey Shootoutcljengcehefhflhoahaambmkknjekjib– Odds Of The Gods – Slot Machineclpgopiimdjcilllcjncdkoeikkkcfbi– Billiards Procmeoegkmpbpcoabhlklbamfeidebgmdf– Three Card Pokercmlbghnlnbjkdgfjlegkbjmadpbmlgjb– Donuts – Slot Machinecnibdhllkgidlgmaoanhkemjeklneolk– Archer – Slot Machinecpnfioldnmhaihohppoaebillnambcgn– Rugby Rushdbohcpohlgnhgjmfkakoniiplglpfhcb– Bingodcamdpfclondppklabgkfaofjccpioil– Web Client for game Cricket Batter Challengedljlpildgknddpnahppkihgodokfjbnd– Slot Machine Zeus Treasuresdlpiookhionidajbiopmaajeckifeehn– Horse Racingdmaibhbbpmdihedidicfeigilkbobcog– Aztec – Slot Machinedohenclhhdfljpjlnpjnephpccbdgmmb– Straight 4dpdemambcedffmnkfmkephnhhnclmcio– Slot The Gold Potejlcbfmhjbkgohopdkijfgggbikgbacb– American Roulette Royaleeljfpgehlncincemdmmnebmnlcmfamhm– Asia Slotenmmilgindjmffoljaojkcgloakmloen– Web Client for game Drive Your Careoklnfefipnjfeknpmigmogeeepddcch– Jurassic Giants – Slot Machinefddajeklkkggbnppabbhkdmnkdjindlo– Street Basketballfibgndhgobbaaekmnneapojgkcehaeac– Tarot Side Panelfjfhejmbhpabkacpoddjbcfandjoacmb– Dragon Slayer – Slot Machineflkdjodmoefccepdihipjdlianmkmhgc– Best Blackjackfmajpchoiahphjiligpmghnhmabolhoh– Book Of Magic – Slot Machinegaafhblhbnkekenogcjniofhbicchlke– Snake – Slot Machinegbaoddbbpompjhmilbgiaapkkakldlpc– Dice King – Classic Craps And Roll Gamegbhhgipmedccnankkjchgcidiigmioio– Slot Ramsesgfhcdakcnpahfdealajmhcapnhhablbp– Battleship Wargipmochingljoikdjakkdolfcbphmlom– Gold Miner 2glofhphmolanicdaddgkmhfmjidjkaem– Greyhound Racing – Dog Race Simulatorhaochenfmhglpholokliifmlpafilfdc– Hercules: Sports Legendhbobdcfpgonejphpemijgjddanoipbkj– Flicking Soccerhdmppejcahhppjhkncagagopecddokpi– Voodoo Magic – Slot Machineheljkmdknlfhiecpknceodpbokeipigo– Web Client for Hockey Shootout – SideGamehiofkndodabpioiheinoiojjobadpgmj– MASTER CHECKERShkbihmjhjmehlocilifheeaeiljabenb– Watercraft Rushhlmdnedepbbihmbddepemmbkenbnoegd– Car Rushhmlnefhgicedcmebmkjdcogieefbaagl– Video Poker Deuces Wildhnpbijogiiaegambgpaenjbcbgaeimlf– Slot Machine Ultimate Socceribelidmkbnjmmpjgfibbdbkamgcbnjdm– Christmas Eve – Slot Machineihbkmfoadnfjgkpdmgcboiehapkiflme– Columbus Voyage – Slot Machineijccacgjefefdpglhclnbpfjlcbagafm– High or Low Casino Gameijfmkphjcogaealhjgijjfjlkpdhhojk– Goalkeeper Challengeijpgccpmogehkjhdmomckpkfcpbjlmnj– Tropical Beach – Slot Machineimjmnghlhiimodfkdkgnfplhlobehnpm– BlackJack 3Djddinhnhplibccfmniaakhffpjpnaglp– Web Client for game Classic Bowlingjmopjanoebpdbopigcbpjhiigmjolikk– Raging Zeus Minesjnmmbmkmbkcccpihjgnhjmhhkokfdnfe– Classic Backgammonjodocbbdcdclkhjkibnlfhbmllcpfkfo– Slot Machine The Fruitskahcolfecjbejjjadhjafmihdnifonjf– Baccaratkblomapfkjidbbbdllmofkcakcenkmec– Mini Golf Worldkbmindomjiejdikjaagfdbdfpnlanobi– Gold Rush – Slot Machinekbnkkecifeppobnemkielnpagifkobki– Pirat Slotkjnakdbpijigdbfepipnbafnhbcfdkga– 40 Imperial Crown – Slot Machinekknakidneabpfgepadgpkibalcnabnnh– 3D Soccer Slot Machineklglejfbdeipgklgaepnodpjcnhaihkd– Premium Horse Racingkmiidcaojgeepjlccoalkdimgpfnbagj– Tanks Gamelcijkepobdokkgmefebkiejhealgblle– Caribbean Stud Pokerlefndgfmmbdklidbkeifpgclmpnhcilg– Wild Buffalo – Slot Machinelfkknbmaifjomagejflmjklcmpadmmdg– Aqua – Slot Machineljbgkfbiifhpgpipepnfefijldolkhlm– Game Crypto Mergelmcpbhamfpbonaenickjclacodolkbdl– Sherwood Forest – Slot Machinelmgenhmehbcolpikplhkoelmagdhoojn– Web Client for game Fatboy Dreammaeccdadgnadblfddcmanhpofobhgfme– Lone Star Jackpots – Slot Machinemedkneifmjcpgmmibfppjpfjbkgbgebl– Hidden Kitty Gamemheomooihiffmcgldolenemmplpgoahn– Kenommbbjakjlpmndjlbhihlddgcdppblpka– Jokers Bonanza – Slot Machinemmbkmjmlnhocfcnjmbchmflamalekbnb– Penalty Kicksnbgligggjfgkpphhghhjdoiefbimgooc– Pai Gow Pokerncpdkpcgmdhhnmcjgiiifdhefmekdcnf– Metal Calculatorndajcmifndknmkckdcdefkpgcodciggk– Farm – Slot Machinenelbpdjegmhhgpfcjclhdmkcglimkjpp– Rail Maze Puzzlenkacmelgoeejhjgmmgflbcdhonpaplcg– RED DOG CARD GAMEnmegibgeklckejdlfhoadhhbgcdjnojb– Coin Miner 2nodobilhjanebkafmpihkpoabiggnnfl– Black Ninja – Slot Machineoanpifaoclmgmflmddlgkikfaggejobn– Pyramid Solitaireocflhkadmmnlbieoiiekfcdcmjcfeahe– Chrome Client for Downhill Ski – SideGameodeccdcabdffpebnfancpkepjeecempn– Slot Machine Mr Chickenoejhnncfanbaogjlbknmlgjpleachclf– Web Client for French Roulette – SideGameogbaedmbbmmipljceodeimlckohbnfan– 3D Roulette Casino Gameojkbafekojdcedacileemekjdfdpkbkf– Slot Machine Space Adventurepdgaknahllnfldmclpcllpieafkaibmf– Whack ’em Allpeflgkmfmoijonfgcjdlpnnfdegnlaji– Video Poker Jacks or Betterphfkdailnomcbcknpdmokejhellbecjb– Swimming Propkghgkfjhjghinikeanecbgjehojfhdg– InterAltpllkanemicadpcmkfodglahcocfdgkhj– Gold of Egypt – Slot Machine
