Google cans Chrome extensions that contained malware
 
 
Good apps that got in with the wrong crowd
ONLINE SHOPKEEPER Google has removed two apps from its Chrome Web Store after 
it was found that they were infected with malware.

The two apps Add To Feedly and Tweet This Page previously were reputable apps, 
but had been bought by unscrupulous parties who took advantage of the apps' 
good reputations.

The scam is simple enough. A developer writes an app and spends a lot of time 
building up good reviews in the Chrome Web Store. The scammer then comes 
forward as an investor and offers to buy the app in order to take it to the 
next level. He then takes advantage of the auto-update facility in Chrome that 
is on by default by creating a malware infested version of the app and pushing 
it out to trusting users.

Add To Feedly developer Amit Agerwal told readers on his blog, "The extension 
does offer an option to opt-out of advertising (you are opted-in by default) or 
you can disable them on your own by blocking the superfish.com and 
www.superfish.com domains in your hosts file but quietly sneaking ads doesn't 
sound like the most ethical way to monetize a product. It was probably a bad 
idea to sell the Chrome add-on and [I] am sorry if you were an existing user. 
Meanwhile, you can switch to the Feedly bookmarklet for the adware-free 
experience."

The co-author of Honey, another popular add-on for Chrome that silently scans 
for valid coupon codes as you shop, told Reddit that he had been approached on 
multiple occasions by hackers wanting to do the same thing with his app.

He said, "Usually [they] start with an email and progress to a call. I've 
spoken to a few on the phone and they sound just like normal people proposing a 
business deal. I'm sure they've justified what they do in their own mind so 
they don't sound shifty or unsure at all. Mental gymnastics is an amazing 
thing."

The developer, who is known as gemusan, was keen to point out that Honey has 
not fallen prey to such a scam and continues to be a reputable app. Meanwhile 
this practice appears to be increasing, and we might find that this is just the 
tip of the iceberg. µ

Tags: Google

Categories: Security

  

 
Skip to comments | Send to a friend | Follow us on Twitter | Related articles | 
Related jobs
Add a comment
Please enable JavaScript to view the <a 
href="http://disqus.com/?ref_noscript";>comments powered by Disqus.</a>
Related articles
Google's latest update builds Chrome OS straight into Windows 8
Google tweaks Gmail and Chrome with nifty features for easier use
Google's Chrome web browser automatically blocks malicious threats
Google’s Chrome apps break free of the web
Microsoft outs Trojan hijacking Facebook accounts via Chrome and Firefox 
browser extensions
Lookout warns of Notcompatible Android malware resurgence
Latest jobs
Project Manager – Financial Services - Cambridgeshire - £30k-£45k+Bens
Web Developer - JavaScript, HTML, CSS, .NET
JavaScript Developer - JavaScript, Node.js.
more jobs >>

Search    

 
Home | News | Reviews | INQdepth | Jobs | Download store | Newsletters
the INQUIRER

Go to desktop edition
Contact us
Terms and conditions
Privacy policy


© Incisive Media Investments Limited 2012, Published by Incisive Financial 
Publishing Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, are 
companies registered in England and Wales with company registration numbers 
04252091 & 04252093



<div> <img alt="DCSIMG" id="DCSIMG" width="1" height="1" 
src="http://statse.webtrendslive.com/dcsib37fpvz5bdjnopthokc8d_2n6p/njs.gif?dcsuri=/nojavascript&amp;WT.js=No&amp;WT.tv=9.3.0&amp;WT.dcssip=www.m.theinquirer.net"/>
 </div>



http://m.theinquirer.net/inquirer/news/2323930/google-cans-chrome-extensions-that-contained-malware


Sent from my iPhone

-- 
You received this message because you are subscribed to the Google Groups "The 
Unique Geek" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/theuniquegeek.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to