Popular Chrome Extensions with 1.4 Million Users Discovered Stealing User Data

Since Google Chrome is the most widely used web browser in the world, it should come as no surprise that its extensions are also utilised in a diverse range of contexts. Browser extensions provide useful capabilities such as the ability to block advertisements, take fast screenshots, locate coupons on shopping websites, and a variety of other useful services.

According to a recent analysis published by McAfee, a number of Chrome extensions, including some of the most popular ones, are guilty of collecting users’ personal information. Among these extensions are “Netflix Party,” “Netflix Party 2,” “Full Page Screenshot Capture,” and “FlipShope,” among others. These have a combined total of more than 1.4 million downloads.

Netflix Party and Netflix Party 2 are the two extensions that have been downloaded more than 800,000 and 300,000 times, respectively, making them the most popular of all of these add-ons. This extension does exactly what its name suggests: it enables you to watch Netflix with your friends and family online by synchronizing the films that you view. It also provides you with the opportunity to stop and play your films for everyone who is participating in the party, in addition to a chat room that is located next to the content that you are watching on Netflix.

FlipShope monitors pricing on a variety of shopping websites, and the functionality of Full Page Screenshot Capture does not require an explanation.

According to the analysis published by McAfee, these add-ons have the ability to load a multipurpose script that sends surfing data to a domain that is controlled by an attacker. When you go to a different website, the information that you provide is sent to this domain. It was revealed that the extensions were collecting user ID, the location of the device, zip codes, nationality, and even more information.

The victims were accessing eCommerce websites when the code was inserted into their browsers using this tactic. Cookies from these websites were being modified by the code in order to obtain affiliate compensation for any items that were purchased.

McAfee didn’t waste any time informing Google about their discoveries, and as a result, Netflix Party, Netflix Party 2, and Auto Buy Flash Sales have been deleted from the Chrome Web Store.

On the other hand, FlipShope and Full Page Screenshot Capture may still be downloaded from the store, however, the reason for this is not obvious.

Read:
The Best Extensions to Personalise Google Chrome in 2022
How to speed up Google Chrome on your Android phone
Chrome Will Now Warn When You Should Not Trust An Extension
Google Chrome for Android brings faster loading times
Google is speeding up its release cycles for Chrome