Kurzfassung
Over 737 malicious Chrome extensions impersonated well known VPN and proxy services on the Chrome Web Store. Once installed, they routed users' browsing traffic through SOCKS5 proxies operated by a single unknown provider, exposing...
Wie es funktioniert
Over 737 malicious Chrome extensions impersonated well known VPN and proxy services on the Chrome Web Store. Once installed, they routed users' browsing traffic through SOCKS5 proxies operated by a single unknown provider, exposing...
Warnzeichen
- : Extension brand name differs slightly from a real VPN (typo squatting) Permissions request broad host access with no clear justification Reviews are short, generic, and posted in bursts
Was tun
- 1: Remove any Chrome VPN extension you did not install intentionally from the official vendor site Verify extensions by visiting the vendor's official website and clicking the install link from there Audit Chrome extensions regularly and revoke 'Read and change all your data' permissions
Quelle
bleepingcomputer
Quelle geprueft vom Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/hundreds-of-fake-chrome-vpn-extensions-route-traffic-through-a-proxy/FAQ
Ist Hundreds of Fake Chrome VPN Extensions Route Traffic Through Attacker Proxies ein reales Betrugsmuster?
Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.
Was sind die ersten Warnzeichen?
: Extension brand name differs slightly from a real VPN (typo squatting) Permissions request broad host access with no clear justification Reviews are short, generic, and posted in bursts
Was sollte ich zuerst tun?
: Remove any Chrome VPN extension you did not install intentionally from the official vendor site Verify extensions by visiting the vendor's official website and clicking the install link from there Audit Chrome extensions regularly and revoke 'Read and change all your data' permissions
Kann LegalAudit meinen Fall pruefen?
Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.