Someone Hijacked MEGA Chrome Extension to Steal Users Passwords
 |
| Someone Hijacked MEGA Chrome Extension to Steal Users Passwords |
Warning! If you are using Chrome browser extension from the MEGA file storage service, uninstall it right now.
Security Reserchers at MEGA.nz cloud storage service announced a bad news as the The official Chrome extension for the MEGA.nz cloud storage service his now hacked and replaced by the malicious version that can steal user important information related to popular websites like Amazon, Microsoft, Github, and Google, as well as private keys for users' cryptocurrency wallets. For More information please see this blog
Security Reserchers indicate that Attackers hacked into the MEGA's Google Chrome web store account turned into the malicious software on 4 September at 14:30 UTC . This is the version 3.39.4 of an extension Uploaded on web store.
Attacking Targets:
Most of the popular websites that continue users data and money inside it is the highest property target like Amazon, Github, and Google, along with online wallets such as MyEtherWallet and MyMonero, and Idex.market cryptocurrency trading platform. trojanized Mega extension is helping this MEGA extension that transfer data to the Hacker server which is indicated in Ukraine
What to do next ?
The company also said Google disallowed publishers to sign their Chrome extensions and Offical website MEGA.nz
The Firefox version of MEGA has not been impacted or tampered with, and users accessing MEGA through its official website (https://mega.nz) without the Chrome extension are also not affected by the breach.
Four hours after the security breach, the company learned of the incident and updated the extension with a clean MEGA version (3.39.5), auto- updating all the affected installations.
Google also removed the MEGA extension from its Chrome Web Store five hours after the breach.
Tags :
MEGA Chrome Extension , Mega Hacked, Someone Hijacked MEGA Chrome Extension to Steal Users' Passwords,
No comments: