Google removes QuickLens add-on from web store

Google has already removed the QuickLens add-on from Chrome's web store after stealing scripto data from 7000 victims.

Chrome is known as a popular web browser from Google with a large number of users, with add-ons or extensions that enhance its capabilities, facilitate many users, and of course not all add-ons are secure, many have malware.

According to a report by the SCWorld website, the most popular Chrome add-on, QuickLens - Search Screen with Google Lens, was removed from the web store for the distribution of the official Chrome add-on, Chrome Web Store, after version 5.8, the latest version of the add-on, was hacked into malware code, after the ownership of the add-on was changed from the original developer to another developer, whose version was contaminated with malware before it was deleted by Google, up to 7,000 people downloaded it together.

The malware-contaminated version removes the security headers Content-Security-Policy. There is also a very high level of access to the web browser (Permission). It also leads to JavaScript running scripts to contact the control server (C2 or Command and Control), to send the victim's identity information (Fingerprint), and to receive commands from the C2 server.

Not only that, this malware also deceives the victim by using fake update notifications or even using fake bug notifications, which is a ClickFix method of deception that leads to downloading and running malware installers downloaded from C2 servers. The malware is a data theft type malware or an Infostealer that focuses on stealing codes for recovering the Serrency Crypto Purse (Seed Phase) from popular wallets such as MetaMask and Phantom. The malware also has the ability to steal passwords and other sensitive information.

# Trending # Lemon 8 Howtoo # lemon 8 diary # freedomhack # google