Popular Google Chrome Extensions That Steal Your Personal Information

Since Google Chrome is the most widely used internet browser worldwide, it is not surprising that many people utilize its extensions. Convenient functions like ad blocking, rapid screenshotting, locating coupons on retail websites, and others are provided by browser extensions.

According to a recent McAfee analysis, some really popular Chrome extensions are unfortunately stealing your personal information. These add-ons include FlipShope, Full Page Screenshot Capture, Netflix Party, and Netflix Party 2. Over 1.4 million people have downloaded all of these.

With over 800,000 and 300,000 downloads each, Netflix Party and Netflix Party 2 are the most downloaded of all of these extensions. By synchronizing videos, this plugin enables you to watch Netflix with friends and family online as its name suggests. Along with your Netflix content, you also get access to a chat room and the option to pause and resume your videos for everyone in the group.

Full Page Screenshot Capture and FlipShope track pricing among various online stores without more explanation.

How It Was Done

These extensions, according to a McAfee investigation, have the ability to load a multipurpose script that sends surfing information to a domain under the control of an attacker. The information is transmitted to this domain each time you visit a new website. According to reports, the extensions stole user IDs, device locations, zip codes, nationalities, and more.

When the victims visited eCommerce websites, the tactic was utilized to introduce code into those sites. The code was altering cookies from these websites in order to collect affiliate commissions for any purchases.

Quickly after alerting Google to their discoveries, McAfee deleted Netflix Party, Netflix Party 2, and Auto Buy Flash Sales from the Chrome Web Store.

On the other side, it's not obvious why FlipShope and Full Page Screenshot Capture are still accessible for download at the shop.