{"id":11168,"date":"2025-06-24T17:55:57","date_gmt":"2025-06-24T17:55:57","guid":{"rendered":"https:\/\/colemandev.directivesites.com\/watch-out-for-malicious-browser-extensions\/"},"modified":"2025-06-24T20:08:11","modified_gmt":"2025-06-24T20:08:11","slug":"watch-out-for-malicious-browser-extensions","status":"publish","type":"post","link":"https:\/\/colemantechnologies.directivesites.com\/?p=11168","title":{"rendered":"Watch Out for Malicious Browser Extensions"},"content":{"rendered":"<div class=\"eb-entry-article clearfix\" data-blog-content=\"\">\n<h2>How Do These Threats Work?<\/h2>\n<p>These attacks work similarly to how a phishing attack or a spoofed email would, as a user is promised one thing but winds up receiving something very different. While a malicious application may perform the task it claims to, it also may redirect the user to a phishing website or ad (making the cybercriminal some money) or simply steal some of the user\u2019s information, like their birthday or email address.<\/p>\n<p>\u00a0<\/p>\n<p> In the case of these extensions, the code needed for several different malicious operations was present, including:<\/p>\n<ul>\n<li>Redirecting traffic to advertisements (falsely generating revenue)<\/li>\n<li>Redirecting traffic to <a href=\"https:\/\/colemandev.directivesites.com\/how-not-to-teach-your-team-about-phishing-courtesy-of-godaddy\/\">phishing<\/a> websites<\/li>\n<li>Collecting personal data<\/li>\n<li>Collecting browsing history<\/li>\n<li>Downloading additional malware onto a user\u2019s device<\/li>\n<\/ul>\n<p>Avast\u2019s researchers believe that only the first code was actively utilized, generating ill-gotten revenue for the creators of these extensions. Regardless, these extensions should be removed from any systems on your business\u2019 network that they may be installed on.<\/p>\n<p>\u00a0<\/p>\n<p> The impacted extensions are as follows:<\/p>\n<h3>Chrome<\/h3>\n<ul>\n<li>App Phone for Instagram<\/li>\n<li>Direct Message for Instagram<\/li>\n<li>DM for Instagram<\/li>\n<li>Downloader for Instagram<\/li>\n<li>Invisible mode for Instagram Direct Message<\/li>\n<li>Odnoklassniki UnBlock. Works quickly.<\/li>\n<li>Spotify Music Downloader<\/li>\n<li>Stories for Instagram<\/li>\n<li>The New York Times News<\/li>\n<li>Universal Video Downloader<\/li>\n<li>Upload photo to Instagram\u2122<\/li>\n<li>Video Downloader for FaceBook\u2122<\/li>\n<li>Vimeo\u2122 Video Downloader<\/li>\n<li>VK UnBlock. Works fast.<\/li>\n<li>Zoomer for Instagram and Facebook<\/li>\n<\/ul>\n<h3>Edge<\/h3>\n<ul>\n<li>DM for Instagram<\/li>\n<li>Downloader for Instagram<\/li>\n<li>Instagram App with Direct Message DM<\/li>\n<li>Instagram Download Video &amp; Image<\/li>\n<li>Pretty Kitty, The Cat Pet<\/li>\n<li>SoundCloud Music Downloader<\/li>\n<li>Stories for Instagram<\/li>\n<li>Universal Video Downloader<\/li>\n<li>Upload photo to Instagram\u2122<\/li>\n<li>Video Downloader for FaceBook\u2122<\/li>\n<li>Video Downloader for YouTube<\/li>\n<li>Vimeo\u2122 Video Downloader<\/li>\n<li>Volume Controller<\/li>\n<\/ul>\n<p>Again, we encourage you to check your company\u2019s network to ensure that these extensions are not installed in any of your users\u2019 browsers, and that you encourage your employees to do the same.<\/p>\n<p>\u00a0<\/p>\n<p> Not sure how to go about doing so? Coleman Technologies can help. As a managed service provider, our services include remotely monitoring your business\u2019 technology and network for threats while keeping abreast of this kind of news so that we can proactively resolve any issues that may influence your operations.<\/p>\n<p>\u00a0<\/p>\n<p> Find out more today by reaching out to us at (604) 513-9428.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>How Do These Threats Work? These attacks work similarly to how a phishing attack or a spoofed email would, as a user is promised one thing but winds up receiving something very different. While a malicious application may perform the task it claims to, it also may redirect the user to a phishing website or [&hellip;]<\/p>\n","protected":false},"author":16,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[58,105,31],"tags":[],"class_list":["post-11168","post","type-post","status-publish","format-standard","hentry","category-browser","category-hackers","category-security"],"_links":{"self":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11168"}],"version-history":[{"count":1,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11168\/revisions"}],"predecessor-version":[{"id":12540,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11168\/revisions\/12540"}],"wp:attachment":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}