Nearly 7 million users targeted via malicious browser extension

Telemetry data collected by Kaspersky shows that almost 7 million users have attempted to install malicious browser extensions since 2020.

The most common payloads transmitted by malicious web browser extensions in the first half of 2022 belonged to adware families.

Between January 2020 and June 2022, adware extensions target 4.3 million unique users, accounting for 70 per cent of all malicious extensions during that period.

The biggest threats in 2022 include WebSearch, AddScript and DealPly.

According to researchers, WebSearch extensions targeted 878,924 users in 2022. WebSearch extensions mimic productivity tools and monitor users’ browsing activity to profile them based on their interests. WebSearch then promotes links from related marketing programs that help monetize the infection.

AddScript extensions have been seen in attacks against 156,698 unique users. AddScript uses JavaScript, and it runs in the background while its extensions provide promised functionality.

DeepPly is responsible for 97,525 infection attempts in the first half of the year. The adware starts with the execution of pirated software, followed by the automatic injection of browser extensions and the addition of new registry keys.

Users can protect themselves from adware by simply downloading extensions from the official web store of the browser. They are also advised to examine user comments, reviews and background checks of the developer/publisher.

The sources for this piece include an article in BleepingComputer.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web