[Knowledge Base] Infected Chrome Extension

[Berserk]

On Christmas Eve, multiple phishing emails were sent to Chrome extension developers (and developers of other browsers using Chromium or supporting applications also available on the Chrome Web Store, such as Firefox). Those who fell victim (a list shown in the image) had their developer accounts accessed, and the source code of their extensions was modified, with the updated versions being pushed to the web store.

A more advanced list can be found here: https://www.extensiontotal.com/cyberhaven-incident-live
More details here: https://www.youtube.com/watch?v=N_UYFXsHIHE


RO :


Rezumat : De ajun s-au dat multiple mailuri phishing catre developeri de extensii pentru Chrome ( si alte browsere care folosesc Chromium sau care suporta aplicatii gasite si pe Chrome Webstore cum e Firefox spre exemplu ) cei care au picat in plasa ( lista lor prezentata in imagine ) li s-au accesat contul de developer , si au modificat codul sursa a extensiei pe care o aveau , trimitand update-ul catre webstore.

O lista mai avansata o puteti gasi si aici : https://www.extensiontotal.com/cyberhaven-incident-live

Mai multe detalii aici : https://www.youtube.com/watch?v=N_UYFXsHIHE