Hackers Are Going After Google Chrome Extensions

Browser extensions are a useful way to add additional features to your internet experience that aren’t built into the program you use. However, it seems they can also be a gateway for bad actors to compromise your system and networks. 

As reported by Reuters, hackers spent December compromising the Chrome extensions of multiple companies. One of the most vocal companies affected is Cyberhaven, a data protection company based out of California. 

Cyberhaven says the attack against its network came on Christmas Eve, and was, in the company’s view, a “part of a wider campaign to target Chrome extension developers across a wide range of companies.” The company is working with federal law enforcement regarding the issue, but at this point, it isn’t known where the hackers were based out of. 

Cyberhaven’s affected Chrome extension was designed to assist the company with keeping tabs on customer data as it was processed through web-based apps. 

Of course, this isn’t the only extension to be hit. Other extensions have been hacked in a similar way, including extensions involving artificial intelligence and VPNs. According to Jaime Blasco, co-founder of Nudge Security, that could be a sign that hackers are focused on extensions that can help them scrape as much user data as possible. 

Keep yourself safe

You shouldn’t be worried to use browser extensions: They can be useful, and enhance the way you use the internet. However, you should be proactive about confirming the security of each extension you install, whether you use Google Chrome, Microsoft Edge, or another browser.

Before you install a browser extension, examine the listing, looking for any red flags in the text or images presented. If there are spelling and grammar issues, low-quality images, or anything that doesn’t feel relevant to the functions the browser extension is advertising, consider skipping it. Also look to the reviews: If there are too many negative reviews, or if some of the positive reviews seem fishy, that’s another sign this extension isn’t what it’s cracked up to be.