security

Be cautious while installing Google Chrome extensions: Cyber security agency CERT-In – The Hindu


(Subscribe to our Today’s Cache newsletter for a quick snapshot of top 5 tech stories. Click here to subscribe for free.)

Internet users should exercise caution while installing Google Chrome extensions as the company has removed over 100 malicious links after they were found collecting “sensitive” user data, country’s cyber security agency said on Wednesday.

The Computer Emergency Response Team of India (CERT-In), the national technology arm to combat cyber attacks and guard the Indian cyber space, said it has also been found that these extensions contained code to bypass Google Chrome’s web store security scans.

The malicious extensions had the ability to take screenshots, read the clipboard, harvest authentication cookies or grab user keystrokes to read passwords and other confidential information, it said.

“It has been reported that Google has removed 106 extensions of the Google Chrome browser from the chrome web store which were found collecting sensitive user data,” the agency said in the advisory.

“These extensions, reportedly posed as tools to improve web searches, convert files between different formats as security scanners and more,” it added.

The federal cyber security agency suggested users to uninstall Google Chrome extensions with IDs given in the IOCs (organisational chart) section.

Users can visit the chrome extensions page and subsequently enable developer mode to see if they have installed any of the malicious extensions and then remove them from their browsers, it said.

The agency advised Internet users to only install extensions that are absolutely needed and refer user reviews before doing so.

They should uninstall extensions which are not in use, it said, adding that users should not install extensions from unverified sources.

You have reached your limit for free articles this month.

Subscription Benefits Include

Today’s Paper

Find mobile-friendly version of articles from the day’s newspaper in one easy-to-read list.

Unlimited Access

Enjoy reading as many articles as you wish without any limitations.

Personalised recommendations

A select list of articles that match your interests and tastes.

Faster pages

Move smoothly between articles as our pages load instantly.

Dashboard

A one-stop-shop for seeing the latest updates, and managing your preferences.

Briefing

We brief you on the latest and most important developments, three times a day.

Not convinced? Know why you should pay for news.

*Our Digital Subscription plans do not currently include the e-paper ,crossword, iPhone, iPad mobile applications and print. Our plans enhance your reading experience.



READ SOURCE

Leave a Reply