ON AIR NOW

LISTEN NOW

Weather

cloudy-day Created with Sketch.
68°
Overcast
H 77° L 52°
  • cloudy-day Created with Sketch.
    68°
    Current Conditions
    Sct Thunderstorms. H 77° L 52°
  • partly-cloudy-tstorms-day Created with Sketch.
    70°
    Afternoon
    Sct Thunderstorms. H 77° L 52°
  • partly-cloudy-tstorms-day Created with Sketch.
    74°
    Evening
    Sct Thunderstorms. H 77° L 52°
LISTEN
PAUSE
ERROR

Krmg news on demand

00:00 | 00:00

LISTEN
PAUSE
ERROR

Krmg traffic on demand

00:00 | 00:00

LISTEN
PAUSE
ERROR

Krmg weather on demand

00:00 | 00:00

Google pulls two Chrome extensions for pushing malware

Trending on Facebook

More Popular and trending stories

If you use Google's popular web browser Chrome, you may want to think twice before downloading your next extension. The company recently pulled two products from its extension store after they started pushing malware on their users.

The story starts with Amit Agarwal, a tech blogger who created the Add to Feedly extension to augment the popular RSS service. In a blog post, Agarwal says someone offered to buy his extension after it gained around 30,000 Chrome users. "It was a 4-figure offer for something that had taken an hour to create and I agreed to the deal." (Via Digital Inspiration)

A few months after the purchase, Add to Feedly's new owners quietly updated the extension with adware. The once-useful add-on now injected malicious ads onto webpages, replacing links and confronting users with pop-ups. (Via OMG Chrome)

After Add to Feedly's woes went public, a writer for Ars Technica shared a similar experience he had with a different Chrome extension.

"About a month ago, I had a very simple Chrome extension called 'Tweet This Page' suddenly transform into an ad-injecting machine and start hijacking Google searches. ... The extension only started injecting ads a few days after it was installed in an attempt to make it more difficult to detect."

The Wall Street Journal notes in both cases malware purveyors took advantage of an existing extension's user base and Chrome's lax security standards. "Google doesn't review changes to the code of Chrome extensions, and Chrome allows extensions to be updated and pushed to users' computers automatically."

Google has since removed both applications from its store, but the practice of spreading malware through Chrome extensions is still a threat.

One developer for the Chrome extension Honey recently held an Ask Me Anything on Reddit, revealing the add-on had received numerous buy-out offers from malware companies and data collection firms. According to Google, Honey has about 300,000 users.

And Quartz points out Chrome's security team still mostly relies on user reviews to police their extension store. "Google looks like it's taking a more proactive role in enforcement, but it is still a long way from Apple's in-house regulatory commission, or even Firefox's less-rigorous editorial review."

Back in December, Google announced it will limit add-ons to a single function, getting rid of Trojan horse extensions which deliver ads in addition to their normal use. The policy goes into full effect in June.

- See more at Newsy.com

Read More
VIEW COMMENTS

There are no comments yet. Be the first to post your thoughts. or Register.

  • The Pawhuska woman recently accused of exposing herself to a classroom of students was arrested this week on accusations of stealing a purse.  According to the arrest report, Lacey Sponsler allegedly stole a purse while at the Broken Arrow Lanes bowling alley near 111th and Elm last Thursday.   The report states that witnesses saw her acting suspiciously and looking at people’s belongings. One witness saw her grab a purse and asked if it was hers. She said it was not.   A witness then reportedly saw Sponsler walk into the game room and return wearing different clothes. Police were called and found her in the bathroom.   Sponsler was arrested in February for doing a cartwheel in front of students at a Pawhuska school. She was not wearing anything under her dress and exposed herself to the students.
  • Authorities in Ohio arrested three people after they discovered the badly decomposed body of a 71-year-old Vietnam veteran in a home, according to multiple reports. >> Read more trending news Deputies with the Tuscarawas County Sheriff’s Office found the body of Bob Harris, 71, after learning that his Social Security debit card was being used despite the fact that he hadn’t been seen for months, WJW reported. The body had decomposed to the point where the remains were mostly skeletal, lying in the living room of a home in Wainwright. The body was kept a short distance from where the home’s residents slept, according to WJW. “It’s a horribly graphic case,” Sheriff Orvis Campbell told TimesReporter.com. He said Harris’ body was found in some “of the most deplorable conditions we can describe.” Trash and animal waste was found near the body. Harris was living with a married couple and their daughter, according to TimesReporter.com. The family had spread stories about Harris moving to Stark County and allowing them to use his Social Security benefits, Campbell said. Authorities arrested Brian and Stacy Sorohan on charges of abuse of a corpse and theft of a credit card, according to The Associated Press. The couple’s 18-year-old daughter was charged with abuse of a corpse. Deputies said the circumstances surrounding Harris’ death were not immediately clear. An autopsy will be performed to determine whether his death involved foul play, according to TimesReporter.com.
  • Tulsa police Thursday released video of an incident in which an officer used his patrol car to end a gunfight. Madison Dickson was the suspect in a string of violent crimes that spanned nearly a week when she was spotted in a vehicle near 91st and Harvard last Saturday. She tried to run, and gunfire is heard on the video, which officers say was directed toward them. The officer swerves left as she points the gun at him, then veers right and runs her over as she attempts to flee. Additional videos released to media by TPD indicate an officer also used a Taser on Dickson after she was down, because she still had the gun and wasn’t responding to commands. “She might not be able to, hang on,” one officer says as others are yelling at her to show her hands. EMSA arrived on the scene a few minutes later, but Dickson died from her injuries.
  • After hours of negotiations that featured personal intervention by President Donald Trump, Republican leaders in the Congress were forced to back off a planned vote on a GOP health care bill, unable to find enough votes approve it and send it on to the Senate for further work. While House leaders said votes were possible on Friday, there was no final agreement to vote on, as more conservative members of the House Freedom Caucus refused to get on board with a deal offered by the White House. “We have not gotten enough of our members to get to yes,” said Rep. Mark Meadows (R-NC), the chair of the Freedom Caucus. “I am still a no at this time,” Meadows told a crush of reporters. “I am desperately trying to get to yes.” Rep. Mark Meadows: “I am still a no at this time. I am desperately trying to get to yes” https://t.co/cQi0OGdJGY — CNN Politics (@CNNPolitics) March 23, 2017 Other Freedom Caucus members said very little as they exited a Congressional hearing room after a two hour meeting on the health bill, leaving Meadows to get out the message. “No comment,” said Rep. Ron DeSantis (R-FL). “Mark’s got everything,” referring to Meadows. “You know I’m not going express the substance of anything that we talked about in there,” said Rep. Trent Franks (R-AZ) said as reporters trailed him down the hall. Earlier at the White House, there had been optimism after a meeting between Freedom Caucus members and the President. Lengthy standing ovation from the Freedom Caucus when @POTUS walked into the Cabinet Room just now. Big momentum toward #RepealAndReplace. pic.twitter.com/N1FLGAVFMN — Cliff Sims (@CSims45) March 23, 2017 But, there was no deal.
  • Conservative Republicans opposed to the health care reform bill offered by their leadership have forced a delay in a vote on the measure, which was expected to happen Thursday. House GOP leadership announced they will push the vote back about 2:30 Central Time after a flurry of meetings between Republican members of the Freedom Caucus, moderates pushing the plan, and the White House. The delay is seen as a rebuke of the Trump administration, which has brought pressure to bear in an attempt to bring those more conservative members on board. Those Republicans opposed to the bill in its current form generally want deeper cuts in spending on the program. Some have called it “Obamacare Light,” and say it doesn’t offer enough substantial changes to current law. Those in favor of the bill argue it eliminates the mandate, and puts choice back in the hands of consumers. There’s no official announcement on when House Speaker Paul Ryan might try to reschedule a vote.