Peppermint OS Community Forum

General => General Discussion => Topic started by: VinDSL on September 05, 2018, 07:52:52 pm

Title: Someone Hijacked MEGA Chrome Extension to Steal Users' Passwords
Post by: VinDSL on September 05, 2018, 07:52:52 pm
Quote
Warning! If you are using Chrome browser extension from the MEGA file storage service, uninstall it right now.

The official Chrome extension for the MEGA.nz cloud storage service had been compromised and replaced with a malicious version that can steal users' credentials for popular websites like Amazon, Microsoft, Github, and Google, as well as private keys for users' cryptocurrency wallets.

LINK: https://goo.gl/2WxHCn
Title: Re: Someone Hijacked MEGA Chrome Extension to Steal Users' Passwords
Post by: scifidude79 on September 06, 2018, 07:10:29 am
Well, that sucks. I wonder how many passwords they got. It looks to be partly Google's fault. Automatically signing extensions is a tremendously bad idea.