Three million users installed 28 malicious Chrome or Edge extensions

[burger2227]

Three million users installed 28 malicious Chrome or Edge extensions

The 28 extensions contained code that could perform several malicious operations. Avast said it found code to:

redirect user traffic to ads
redirect user traffic to phishing sites
collect personal data, such as birth dates, email addresses, and active devices
collect browsing history
download further malware onto a user's device

Below is the list of Chrome extensions that Avast said it found to contain malicious code:

Direct Message for Instagram
DM for Instagram
Invisible mode for Instagram Direct Message
Downloader for Instagram
App Phone for Instagram
Stories for Instagram
Universal Video Downloader
Video Downloader for FaceBook™
Vimeo™ Video Downloader
Zoomer for Instagram and FaceBook
VK UnBlock. Works fast.
Odnoklassniki UnBlock. Works quickly.
Upload photo to Instagram™
Spotify Music Downloader
The New York Times News

Below is the list of Edge extensions that Avast said it found to contain malicious code:

Direct Message for Instagram™
Instagram Download Video & Image
App Phone for Instagram
Universal Video Downloader
Video Downloader for FaceBook™
Vimeo™ Video Downloader
Volume Controller
Stories for Instagram
Upload photo to Instagram™
Pretty Kitty, The Cat Pet
Video Downloader for YouTube
SoundCloud Music Downloader
Instagram App with Direct Message DM