Is Your Browser Extension a Botnet Backdoor?
Summary: Singapore-based Infatica.io built a network of more than 10 million browsers by paying extension authors to silently include its code, offering $15 to $45 per month per 1,000 active users to developers whose extensions have at least 50,000 users. KrebsOnSecurity found Infatica's code associated with at least three dozen extensions over the past few years, including Video Downloader Plus, which at one point claimed nearly 1.4 million active users.
Why it matters: More than 100,000 extensions on chrome-stats.com have gone unupdated for over two years, leaving a large pool of abandoned tools whose authors can sell the code and user base outright - and roughly 30 percent of Chrome extensions can view all of a user's data on all or specific websites.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026