Google Chrome extension that steals card numbers still available on Web Store

guest · Jan 16, 2019

Google Chrome extension that steals card numbers still available on Web Store
Fake "Flash Player" extension has been available since February 2018, was installed by roughly 400 users
January 17, 2019
https://www.zdnet.com/article/googl...ls-card-numbers-still-available-on-web-store/

Until now, the extension has been installed by roughly 400 users, according to stats available on its official Chrome Web Store listing.

The extension's name is Flash Reader. According to a report from ElevenPaths, Telefonica's cyber-security division, the extension was distributed via http://fbsgang[.]info/flashplayer/, a page to which crooks redirected web traffic, possibly from malvertising campaigns or exploit kits.

The page used the classic lure of "you don't have Flash installed, use this Chrome extension instead," and redirected users to Flash Reader's official Chrome Web Store page to install it.
According to a review of the extension's code performed by this reporter and a third-party --to confirm ElevenPath's findings-- the extension contained code that intercepted any form submission made on any web page.
Click to expand...

Mr.X · Jan 16, 2019

Reader Flash not Flash Reader.

guest · Jan 18, 2019

mood said: ↑

Google Chrome extension that steals card numbers still available on Web Store
Click to expand...

The extension has now been removed from the Chrome Web Store.

Log in or Sign up

Google Chrome extension that steals card numbers still available on Web Store

guest Guest

Mr.X Registered Member

guest Guest

Log in or Sign up

Google Chrome extension that steals card numbers still available on Web Store

guest Guest

Mr.X Registered Member

guest Guest

Useful Searches