Support NeoGAF

[winjer]

Cyberhaven Incident

Stay updated on the latest developments of the Chrome Web Store incident involving Cyberhaven's compromised extension. Follow live updates, detailed analysis, impacted extensions, and expert recommendations for safeguarding your organization against similar attacks

www.extensiontotal.com

This is the list of extensions affected, parsed by those that are still compromised and those that are already fixed.

"At this moment the scope of the compromised extensions seems to be contained, so far a total of 36 compromised Chrome extensions were detected (IOCs at the bottom of the page). We continue to monitor in order to detect further infections / copycat threat actors. We are working closely with affected organizations to help handle compromised users."

Widespread cyberattack targets Google Chrome extensions, compromises 2.6 million devices

The attack, which began on Christmas Eve, exploited a vulnerability in the Chrome Web Store's developer authentication system. Attackers used sophisticated spear-phishing techniques to gain access to...

www.techspot.com

If you are using any of these extensions on a Chromium browser, remove them immediately. And wait until the devs regain control of their accounts and fix the compromised extensions.
Another option is to use Firefox or Librewolf.

 

[Rat Rage]

I love Firefox

 

[Trogdor1123]

People really need to stop using chrome

 

[ResilientBanana]

Chrome is shit. I feel bad for no one, my wife included.

 

[Pagusas]

I love Firefox

This has happened to FireFox too, I also hate Chrome, but don't think Firefox is any better or more secure.

 

[Kenneth Haight]

The assumption should be that you are always “compromised”

Anyone who believes incognito or VPNs hide your activity are naive at best, stupid at worst.

As long as you’re not doing anything very nefarious you’re ok.

Assume that someone is always shoulder surfing virtually, cause they probably are.

 

[The Cockatrice]

thats a lot of AI extensions and reader mode hacked again? People should prolly never install that shit ever again tbh.

edit: this happened a week ago, so Im assuming its contained/fixed by now.

 

[winjer]

thats a lot of AI extensions and reader mode hacked again? People should prolly never install that shit ever again tbh.

edit: this happened a week ago, so Im assuming its contained/fixed by now.

Some are already fixed, but several are still compromised. Better check the list.
But even if you are using one that was compromised for a while, its better to start changing passwords, while you still can.

 

[The Cockatrice]

Some are already fixed, but several are still compromised. Better check the list.
But even if you are using one that was compromised for a while, its better to start changing passwords, while you still can.

Yeah, i only use grammarly, adblock and youtube dislike so for now im ok, didnt see those on the list.

 

[V1LÆM]

chrome? what year is it?

firefox is the way to go! yeah it sucked for a while but had no issues with it the last 5+ years.

also if you use edge, brave, vivaldi, opera, etc then it's still got the chrome bones.

firefox and safari are probably the only browsers fighting against Google now.

EDIT: tip for people.... don't trust random AI or "Free VPN" shit you see online. AI is bullshit outside a few specific applications and a Free VPN means YOU are the product. That is true of any free product/service. Think where do they get their money from? Data.

If you must use a VPN then get a paid one with no logs that doesn't legally reside in the US or any other 5 eye states (UK, Australia, Canada, New Zealand).

 

[Fake]

Glad I changed to Firefox long time ago.

 

[Mistake]

I currently use Brave, which is a chrome fork, but nothing I use is on the list