Live tv
search
  1. You Are At:
  2. English News
  3. Technology
  4. Malicious Chrome sync feature can help hackers steal your data

Malicious Chrome sync feature can help hackers steal your data

A cyber security researcher has discovered a malicious Google Chrome extension in the wild abusing the Chrome Sync process that can help hackers steal user data.

IANS Edited by: IANS
New Delhi Published on: February 08, 2021 20:25 IST
google, google chrome
Image Source : PIXABAY

Malicious Chrome sync feature can help hackers steal your data.

A cyber security researcher has discovered a malicious Google Chrome extension in the wild abusing the Chrome Sync process that can help hackers steal user data.

Hackers can use the Google Chrome sync feature to send commands to infected browsers and steal data from infected systems, bypassing traditional firewalls and other network defenses.

Croatian security researcher Bojan Zdrnja found a malicious Chrome extension that can communicate with a remote command and control (C&C) server and as a way to exfiltrate data from infected browsers, reports ZDNet.

Chrome sync is a feature of the Chrome web browser that stores copies of a user's Chrome bookmarks, browsing history, passwords, and browser and extension settings on Google's cloud servers.

According to Zdrnja, the goal was to use the extension to "manipulate data in an internal web application that the victim had access to."

"While they also wanted to extend their access, they actually limited activities on this workstation to those related to web applications, which explains why they dropped only the malicious Chrome extension, and not any other binaries," Zdrnja said in the report.

The basis for this attack were malicious extensions that the attacker dropped on the compromised system.

"Now, malicious extensions are nothing new – there were a lot of analysis about such extensions and Google regularly removes dozens of them from Chrome Web Store, which is the place to go to in order to download extensions," the security researcher mentioned.

Latest Technology News