This malicious Google Chrome extension could hijack your devices if you try and download pirate movies

Date:
Thu, 15 Jun 2023 12:58:57 +0000

Description:
Be careful about what you Chrome extensions you install and what lurks beneath, HP warns.

FULL STORY ======================================================================

New research from HP Wolf security researchers claims a new ChromeLoader campaign has been underway since March affecting users of movie and video
game pirating websites.

The browser hijacker tricks victims into installing a malicious extension called Shampoo, which then redirects users search queries to malicious websites.

The researchers found the malware to be re-launching itself via Task
Scheduler on victims machines every 50 minutes, claiming that victims are having a difficult time getting rid of this malware because it has multiple persistence mechanisms. ChromeLoader malware

Beyond its persistence mechanisms, HP states that its multiple evasion techniques make it hard to break down: The extension is heavily obfuscated
and contains many anti-debugging and anti-analysis traps. Read more

The best endpoint security security tools

Hackers have been spreading malware via fake Chrome updates

Windows, Chrome and Firefox zero-days exploited to spread malware

Even so, the HP Wolf team highlights the similarities between Shampoo and other ChromeLoader versions, pinpointing a specific typo in the code that leads it to believe that it could be linked to another version previously witnessed, giving some hope for justice.

Beyond the Chrome extension malware, this version of the companys quarterly
HP Wolf Security Threat Insights Report shared information about attackers bypassing macro policies by hijacking legitimate Office 365 accounts, urging potential victims to pay attention to what lurks beneath a seemingly legitimate facade.

HPs global head of security for personal systems, Dr Ian Pratt, said: To protect against increasingly varied attacks, organizations must follow zero trust principles to isolate and contain risky activities such as opening
email attachments, clicking on links, or browser downloads. This greatly reduces the attack surface along with the risk of a breach.

Naturally, the company is keen to push its own antivirus and cybersecurity software, but more broadly its common practice to install preventative tools like firewalls in order to secure systems as best as possible. Concerned victims may want to consider using the best identity theft protection software



======================================================================
Link to news story: https://www.techradar.com/news/this-malicious-google-chrome-extension-could-hi jack-your-devices-if-you-try-and-download-pirate-movies


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)