New Fakext malware targets Latin American banks

Browser extensions have become integral to our online experience. From productivity tools to entertainment add-ons, these small software modules offer customized features to suit individual preferences. Unfortunately, extensions can prove useful to malicious actors as well. Capitalizing on the favorable characteristics of an add-on, an attacker can leverage attributes like persistence, seamless installation, elevated privileges […]

The post New Fakext malware targets Latin American banks appeared first on Security Intelligence.

Continue reading New Fakext malware targets Latin American banks

How to determine which Chrome extension is re-directing me to ad sites

Twice now, seemingly randomly, I’ve been redirected to an ad site.
I believe it has occurred both times when I have a new tab open, type what I’m searching for (Google is my default search engine), press enter and then end up on the ad pag… Continue reading How to determine which Chrome extension is re-directing me to ad sites

What can be leaked using a browser extension where one of the extensions loads JavaScript from a remote site?

Can one remotely log my IP, browser history, and saved passwords?
I think the IP should be easily done if one of the extensions load a remote JavaScript to run in my browser. I’m not sure about other stuff within the browser.

Continue reading What can be leaked using a browser extension where one of the extensions loads JavaScript from a remote site?

How can I update an browser extension to use Google’s new code signature?

How can an end-user manually/locally update the code signature for an extension?
A Google Chrome extension broke 1 year ago due to Google Chrome’s new code signature. Users received errors like "can’t verify the identity of your web b… Continue reading How can I update an browser extension to use Google’s new code signature?

The rise of malicious Chrome extensions targeting Latin America

In its latest research, IBM Security Lab has observed a noticeable increase in campaigns related to malicious Chrome extensions, targeting  Latin America with a focus on financial institutions, booking sites, and instant messaging. This trend is particularly concerning considering Chrome is one of the most widely used web browsers globally, with a market share of […]

The post The rise of malicious Chrome extensions targeting Latin America appeared first on Security Intelligence.

Continue reading The rise of malicious Chrome extensions targeting Latin America

Can a browser-based HTTPS proxy secure browsing data while using a system-level proxy?

I use Nekoray to set up proxies for my Windows system.
When I connect to those proxies, does using a browser-based proxy with HTTPS encryption secure my transferred data through the web browser?
Can my ISP or the Nekoray proxies see the UR… Continue reading Can a browser-based HTTPS proxy secure browsing data while using a system-level proxy?

Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?

I wonder if there will be (or is) a way to hide data such as passwords from the HTML/DOM structure? As, password fields can hide from external person other than the main user with something like "••••••••" but this does not preve… Continue reading Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?