Summary: A set of 57 risky Chrome extensions with a total of 6 million users has been identified to have dangerous capabilities, including monitoring browsing behavior and accessing cookies. Discovered by researcher John Tuckner, these hidden extensions can only be installed via direct URLs and might be exploited by threat actors. Many extensions have been removed from the Chrome Web Store, but some remain accessible, prompting urgent recommendations for users to uninstall them and reset passwords.
Affected: Chrome users and potentially compromised online accounts
Keypoints :
- 57 Chrome extensions have been labeled as risky, impacting 6 million users.
- The extensions contain permission to access sensitive data, monitor behavior, and execute remote scripts.
- Users are urged to remove these extensions immediately and reset passwords for online accounts.