TLDR InfoSec · MISCELLANEOUS

MALICIOUS EXTENSIONS CIRCUMVENT GOOGLE'S REMOTE CODE BAN

palant.info19 min read

Summary from the TLDR InfoSec newsletter

This blog post discusses how malicious extensions found ways to hide their harmful functions in Chrome Web Store, despite Google's restrictions. Several extensions, like Phoenix Invicta and Sweet VPN, were discovered using obfuscated code and accessing sensitive data. Domain names associated with these malicious extensions were identified, hinting at potential spying and fraud activities.