
319 Chrome extensions with 13.4 million installs hijacked searches
Socket says operators swapped the default search engine and proxied queries for Bing and Yahoo referral payments; most listings are now gone.
1
2 stories, newest first · one card per story

Socket says operators swapped the default search engine and proxied queries for Bing and Yahoo referral payments; most listings are now gone.

Malicious Twitch extension 'Twitch Enhanced Viewer | JeetBot' forwarded live OAuth session tokens of roughly 31,000 users to Russian JeetBot proxy servers.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views