Home › News › The Web
Attackers prey on inexperienced Google Chrome users
In a new post today on BitDefender's Malware City blog, the company warns Google Chrome users of malware-laced emails. Attackers are reportedly sending unsolicited messages informing users of a new Chrome extension that helps "better organize your documents" received via email. A seemingly innocent link is provided, and once clicked, users are redirected to a clone of the Google Chrome Extensions page.

At the fake site, folks are instructed to download the "extension," which is actually malware. The blog post notes that some experienced users would undoubtedly notice the rogue application because of its improper file type. Rather than end in .crx, the software suspiciously uses the .exe file extension. To be fair, most seasoned Web-goers probably wouldn't have followed the link to begin with.
BitDefender identifies the threat as Trojan.Agent.20577 and says it modifies the Windows HOSTS file, effectively blocking access to Yahoo and Google. Users are then redirected to fake versions of those sites.

At the fake site, folks are instructed to download the "extension," which is actually malware. The blog post notes that some experienced users would undoubtedly notice the rogue application because of its improper file type. Rather than end in .crx, the software suspiciously uses the .exe file extension. To be fair, most seasoned Web-goers probably wouldn't have followed the link to begin with.
BitDefender identifies the threat as Trojan.Agent.20577 and says it modifies the Windows HOSTS file, effectively blocking access to Yahoo and Google. Users are then redirected to fake versions of those sites.
User Comments (5)
Post a comment|
tipstir on April 19, 2010 9:09 PM |
Wow! Thanks for this. I'll keep eye out since I use this browser. |
|
Richy2k9 on April 20, 2010 6:49 AM |
hummm... same here! thanks for info, even if i never really follow links from e-mails. cheers! |
|
z71kris on April 20, 2010 9:40 AM |
I was think who usually follows links from emails unless you know the person who sent it to you, and furthermore how does "the" google get your email address to send you a link to download a file.... |
|
tonylukac on April 20, 2010 2:03 PM |
How would I, as a user of Firefox, know that Chrome add ons have a .crx extension? I bet a lot of people will fall for this. Your getting too technical. |
|
Matthew on April 20, 2010 2:18 PM |
How would I, as a user of Firefox, know that Chrome add ons have a .crx extension? I bet a lot of people will fall for this. Your getting too technical. If you don't use Chrome this wouldn't apply to you at all anyway :P.
|
Most Popular
| Trending | Featured |
-
Chrome 17 released with "instant" browsing, improved security
-
Weekend game deals: Plants vs. Zombies $2, Mass Effect 2 $5
-
Windows 8 Consumer Preview coming Feb. 29, bundled apps leaked
-
Intel Core i7-3820 Review: Sandy Bridge-E for the masses
-
Apple sued for $1.6 billion for using "iPad" in China, apology requested