Security warning for MEGA Chrome extension users

guest · Sep 5, 2018

Security warning for MEGA Chrome extension users
September 4, 2018
https://mega.nz/blog_47

On 4 September 2018 at 14:30 UTC, an unknown attacker uploaded a trojaned version of MEGA's Chrome extension, version 3.39.4, to the Google Chrome webstore.

[...] and would (if permissions were granted) exfiltrate credentials for sites including amazon.com, live.com, github.com, google.com (for webstore login), myetherwallet.com, mymonero.com, idex.market and HTTP POST requests to other sites, to a server located in Ukraine. Note that mega.nz credentials were not being exfiltrated.

Four hours after the breach occurred, the trojaned extension was updated by MEGA with a clean version (3.39.5), autoupdating affected installations. Google removed the extension from the Chrome webstore five hours after the breach.

We would like to apologise for this significant incident. [...] Unfortunately, Google decided to disallow publisher signatures on Chrome extensions and is now relying solely on signing them automatically after upload to the Chrome webstore, which removes an important barrier to external compromise.
Click to expand...

MEGA Chrome Extension Hacked To Steal Login Credentials and CryptoCurrency
September 5, 2018
https://www.bleepingcomputer.com/ne...o-steal-login-credentials-and-cryptocurrency/

Log in or Sign up

Security warning for MEGA Chrome extension users

guest Guest

Log in or Sign up

Security warning for MEGA Chrome extension users

guest Guest

Useful Searches