More Malicious Extensions Found in Chrome Web Store

More malicious extensions have been found in the web store, this time a collection of 5 extensions collect information about your devices, what websites you are going to, and injecting an affiliate link into the url if its a website the dev has a link for. These extensions have collectively been downloaded more than 1.3 million times, and 1 of them is even featured in the chrome web store.

₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿

Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436

Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV

Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079

Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz

Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr

Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14

Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp

Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC

USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB

and be sure to click that notification bell so you know when new videos are released.

[JakeDaines]

You can't expect a multi-dollar company like Google to purity test featured extensions on a niche browser like Chrome.

[metalspoon]

Doesn't surprise me in the slightest.
I maintain a small chrome extension with around 6k users, the store page for it has my contact details (mandated by google, not my choice).
I constantly get emails from "companies" that have "opportunities" to monetize search traffic because my extension contains a search bar, some have even offered to flat out buy my extension.
These emails are incredibly dodgy and 9/10 times the company websites/domains don't exist or are incredibly generic and written in poor English.
Thing is, i have principles and would never sell data from my users, and besides, the entire extension is open source lmao.

[simplyblunder]

At this point Chrome itself should be listed as Malware

[justananimefan]

Screen sharing content on public services like discord to watch together is honestly kind of a rubber-band solution to this whole issue, It takes up a lot of upload bandwidth, will probably desync with the audio and the FPS and resolution will probably be low.

[whitephosphorus]

Discord or similar screen sharing applications tend to have pretty bad quality loss compared to just streaming something yourself. That's why people have used services like Rabbit.

[DF-ssep]

Extensions are great. I hope they keep being supported, they can do anything and they are fun to develop. However, with great power come great vulnerabilities.

[Windy-]

I'm pretty sure Netflix's DRM prevents you from screen sharing it on Discord.

[BlueSatoshi]

12:17 In the boomers' defense, you can't screencap a whole webpage in one go with just Print Screen, and stitching together multiple screenshots can be a hassle.
It's not like how on a Samsung phone (not sure if other Android phones can do this), you can easily do a scroll capture.

[sibouras]

full page screenshot takes a screenshot of the whole page not the visible chunk, in firefox you can ctrl+shift+s to take full page screenshot, edge has it built in too, chrome last time i used it doesn't so maybe that's why some ppl download the extension or use the devtools(ppl that downloaded the extension probably are not developers)

[jspak]

full page screenshot is a full page screenshot, as the name suggest it makes a screenshot of the FULL page not just the visible window

[RemotHuman]

Its full page screenshots - it screenshots the full page as one image like a panorama of all the parts of the page. Otherwise you'd have to take multiple screenshots for any page you scroll down in

[whitephosphorus]

I've used a full page screenshot extension before to capture a list that was very long as one single png. I then proceeded to uninstall the extension.

[blanknamd]

2:52 - There's a problem with that, most browsers will black out the video in the screenshare if they detect any screen capturing - such as a Discord screenshare.

[wantacupoftea]

"Just give your friends access to your seedbox" o.0 I feel violated. How did you know.

[iphone]

that full screenshot capture is used by devs to screenshot entire websites.
the tool scrolls automatically, and takes multiple screenshots, then combines them into one, something that you cannot directly do on any OS

[ChamplooMusashi]

The best part about the extensions store is they'll reject your extension for any random number of reasons, are refusing to list anymore manifest v2 extensions, and still claim mv3 is going to make this all secure

[martinkozle]

I disagree with you trying to convince us how all of these extensions are not even useful. Yes we shouldn't use them because they are malware, but you keep trying to convince us that we shouldn't use them because their advertised features are useless. This is not true.
As others have stated the full page screenshot extension takes a screen shot of the whole scrollable page, something that isn't supported by any desktop OS that I have used (some android phones have it). I personally use a different full page screenshot extension from this one, which hopefully isn't tracking me and injecting affiliate links :).
Syncing internet streams is a lot better than one person restreaming the screen to the other person, this is why I have used watch2gether for many years with many friends because it is superior than streaming a youtube video to them. Recently discord is rolling out their own watch together feature for youtube and it is so far decent. I haven't used Netflix so I cannot comment on that.
In any case Google is to blame here with their poor validation steps or whatever they do on the chrome web store. This poor quality and security control is also happening with the Play Store.

[besc]

Redirecting to affiliate links is so smart. I wonder how much they made off of that idea.

[altermetax]

The reason for using a screenshooting extension is that you may want to take a screenshot of a part of a page that doesn't fit on the screen all together. Luckily Firefox has a screenshot utility by default and you don't need extensions.

[LokiScarletWasHere]

It's like Chrome is bad or something.
As for full page screenshots, those are pictures of the entire canvas, on and off screen. So, not sure if you can do this in Chrome, but ctrl-shift-S works great in Firefox.