The widespread campaign has infected more than 300,000 endpoints around the world with Trojan malware and many malicious extensions, some still active in the Google Chrome Store
NEW YORK, Aug. 6, 2024 /PRNewswire/ -- ReasonLabs, the cybersecurity pioneer equipping home users with a cutting-edge distributed EDR platform, today published a new threat intelligence report highlighting a new global polymorphic malware campaign that is currently ongoing and has affected at least 300,000 Google Chrome and Microsoft Edge users worldwide.
The trojan malware discovered forcefully installs multiple malicious extensions onto users' endpoints to steal private data, execute commands, and carry out adware activities like search hijacks. Since 2021, the malware has originated from imitations of download websites with add-ons to online games and videos. Most antivirus engines do not detect the installer and the extensions. Some of the malicious extensions are still live on the Google Chrome Web Store, while all the identified extensions on the Microsoft Edge Add-ons store have been removed.
"This newly discovered malware campaign is just the latest example of how cybercriminals are targeting consumers in the digisphere," said Kobi Kalif, CEO and co-founder of ReasonLabs. "Our research team remains committed to hunting these threats and providing our users with the tools, knowledge, and information to stay protected online. We alerted Google and Microsoft as soon as we became aware of the issue and they are taking the appropriate measures. We'll continue to provide them with any new information we may find in the future."
To mitigate the risks associated with this widely distributed malware, ReasonLabs advises users to only download extensions from trusted sources and utilize comprehensive endpoint protection cybersecurity solutions like RAV Endpoint Protection, RAV Online Security, and more. RAV Endpoint Protection recently received the highest grade of A+ in Virus Bulletin's VB100 antivirus test, detecting 99.64% of all malware tested.
Previous research from ReasonLabs' Threat Intelligence Center includes its annual Consumer Cybersecurity Trends report, The Cashback Extension Killer, The Super Mario Bros. Pirate, Credit Card Scam Report, and more. Click to view the New Widespread Extension Trojan Malware Campaign.
About ReasonLabs:
ReasonLabs is revolutionizing cybersecurity for consumers with its cutting-edge distributed EDR platform, providing millions of home users the same level of protection trusted by Fortune 500 companies. Powered by artificial intelligence, the ReasonLabs security suite leverages billions of real-time data points, threat intelligence, and behavioral analysis to provide best-in-class security, privacy protection, and identity theft defense. Its products are cloud-native and built with a lightweight architecture for both mobile and desktop. ReasonLabs is certified by the Microsoft Virus Initiative (MVI), VirusBulletin's VB100, and OPSWAT, and is a member of AMTSO and AVAR. The company is based in New York and Tel Aviv. Learn more at https://www.ReasonLabs.com.
Follow us: Blog | Twitter | Facebook | LinkedIn | Instagram | YouTube
Contact:
Eric Wolkstein
Senior MarCom Manager, ReasonLabs
[email protected]
+19892441734
Logo - https://mma.prnewswire.com/media/1883752/ReasonLabs_Logo.jpg
SOURCE ReasonLabs
Share this article