{"id":28913,"date":"2023-04-17T03:27:43","date_gmt":"2023-04-17T03:27:43","guid":{"rendered":"https:\/\/kalilinuxtutorials.com\/?p=28913"},"modified":"2023-04-17T06:18:00","modified_gmt":"2023-04-17T06:18:00","slug":"secure-your-browsers","status":"publish","type":"post","link":"https:\/\/kalilinuxtutorials.com\/secure-your-browsers\/","title":{"rendered":"How to Secure your Browsers from Malicious Extensions?"},"content":{"rendered":"\n

In the first half of 2022, 1.3 million users<\/a> suffered data breaches because of harmful extensions.<\/p>\n\n\n\n

Malicious extensions are considered major risk factors as they can easily penetrate your endpoints<\/a> and cause major system compromises.<\/p>\n\n\n\n

Unsigned and unsafe extensions<\/a> are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. <\/p>\n\n\n\n

Additionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. <\/p>\n\n\n\n

Here are a few recent cases of why your browser extensions threaten your entire network.<\/p>\n\n\n\n

    \n
  1. Chrome browser extension SearchBlox<\/strong> installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.<\/li>\n<\/ol>\n\n\n\n
      \n
    1. An information-stealing Google Chrome browser extension named VenomSoftX<\/a><\/strong> is being deployed to steal cryptocurrency and clipboard contents as users browse the web.<\/li>\n<\/ol>\n\n\n\n
        \n
      1. A new Chrome browser botnet named Cloud9<\/strong> has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim’s browser in DDoS attacks.<\/li>\n<\/ol>\n\n\n\n

        Let’s quickly look into one of the attacks.<\/p>\n\n\n\n

        The Troubles of Being on Cloud9<\/strong><\/h2>\n\n\n\n

        With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. <\/p>\n\n\n\n

        As reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means.<\/p>\n\n\n\n

        What’s the story of Cloud9?<\/strong><\/h2>\n\n\n\n

        The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.<\/p>\n\n\n\n

        The following exploits for vulnerabilities have been observed on various browsers:<\/p>\n\n\n\n