Extensions could redirect users to ads, phishing sites, collect user data, or download malware on infected systems.
More than three million internet users are believed to have installed 15 Chrome, and 13 Edge extensions that contain malicious code, security firm Avast said today. The 28 extensions contained code that could perform several malicious operations. Avast said it found code to: But despite the presence of code to power all the above malicious features, Avast researchers said they believe the primary objective of this campaign was to hijack user traffic for monetary gains. “For every redirection to a third party domain, the cybercriminals would receive a payment,” the company said.
