{"id":122584,"date":"2026-04-13T15:00:21","date_gmt":"2026-04-13T15:00:21","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/04\/13\/these-4-chrome-extensions-started-clean-then-turned-into-malware\/"},"modified":"2026-04-13T15:01:36","modified_gmt":"2026-04-13T15:01:36","slug":"these-4-chrome-extensions-started-clean-then-turned-into-malware","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/04\/13\/these-4-chrome-extensions-started-clean-then-turned-into-malware\/","title":{"rendered":"These 4 Chrome extensions started clean, then turned into malware"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Chrome extensions are highly effective and versatile, however they’re additionally a large privateness and safety danger. This is the reason I and most of the people who know at the least a bit of about cybersecurity decrease or eradicate our use of extensions as a lot as attainable.<\/p>\n

<\/p>\n

One main problem with Chrome extensions<\/a> is that they’ll begin off legitimately helpful and innocent. Then, after changing into in style, the homeowners both add malicious code or promote the extension to another person who does the identical. Until that is caught, all of the individuals who put in the extension are all of a sudden in danger.<\/p>\n

This does not occur that always nowadays, as a result of Google has created ways of detecting malicious code and will block extensions <\/a>that it flags, however there have been some fairly egregious examples up to now.<\/p>\n

<\/p>\n

\n The Nice Suspender
\n <\/h2>\n

\n The suspense was killing everybody
\n <\/h3>\n
\n
\n \"the-great-suspender\"\n <\/picture>\n<\/p><\/div>\n<\/p><\/div>\n

This was a massively in style extension that helped curb Chrome’s insatiable starvation for RAM by unloading inactive tabs from reminiscence. One thing which you may know Chrome has been doing for just a few years in the past. It is known as Memory Saver<\/a>, and, satirically, it arrived the yr after Google blocked The Nice Suspender in 2021.<\/p>\n

The extension had two million customers, and according to Bleeping Computer<\/a>, was offered to an unknown purchaser in 2020. Since it is a free extension with no manner of being profitable, this raised a purple flag.<\/p>\n

In 2021, the maintainer added an replace which included monitoring malware and the power to execute distant code from a server in your pc in case you had the extension put in. Google eliminated the extension from the shop, and in addition forcibly uninstalled it, leaving thousands and thousands of individuals with suspended tabs unable to retrieve them and not using a workaround.<\/p>\n

<\/p>\n

\n Hover Zoom
\n <\/h2>\n

\n Easy but oh so helpful
\n <\/h3>\n

One of the best extensions are ones that do a single helpful factor, and nicely. I solely have extensions by Google put in, and my favourite is the picture-in-picture extension<\/a> that pops out a bit of window for movies on pages like Plex or YouTube, so I can keep on with my work whereas nonetheless maintaining a tally of the footage.<\/p>\n

Hover Zoom was simply this sort of extension. The title says all of it. Hover your pointer over the picture on an online web page, and it expands for you. At first, it was clear as a whistle, and folks cherished it. Nevertheless, cybersecurity watchdogs famous that the extension was sending information again dwelling. One thing it did not must do with a view to work.<\/p>\n

It seems later variations of Hover Zoom had been spying on customers and recording issues like which internet sites they visited. Common customers did not catch on, as a result of the extension stored working as traditional. The spying occurred quietly within the background.<\/p>\n

There is a great article by Sam Jadali<\/a> from Safety with Sam that collects the quite a few stories of how Hover Zoom spied on customers and ship that information to 3rd events neatly organized in a timeline. Simply in case you need all of the sordid particulars.<\/p>\n

<\/p>\n

\n Nano Adblocker
\n <\/h2>\n

\n A tiny little drawback
\n <\/h3>\n

Look, I get it, folks don’t love advertisements on web sites in order that they set up adblockers. After all an internet site like this one prices cash to take care of and to create the content material you are having fun with proper now, so in case you do block all of the advertisements you find yourself with paywalls<\/a>, however I digress.<\/p>\n

The factor is, in case you’re additionally<\/em> not paying on your adblocker, then you definitely run the chance of being exploited by its creators, as they prey in your want to take pleasure in web sites at no cost, and that is what occurred to Nano Adblocker. Constructed on uBlock Origin, it was marketed to energy customers as a strong community-driven blocking device.<\/p>\n

In 2020, the extension modified palms, and shortly the extension injected malicious code into web sites its customers visited. Probably as a result of the Nano Adblocker userbase was extra tech-savvy, folks caught on to this shortly.<\/p>\n

In keeping with Ars Technica<\/a> it had greater than 300,000 lively customers, which is a giant and juicy goal. The unique GitHub challenge nonetheless exists, and the previous maintainer’s take<\/a> on the scenario makes for attention-grabbing studying.<\/p>\n

\n
\n
\n
\n

<\/p>\n

\n
\n
\n \"raspberry\n <\/picture>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
\n

<\/p>\n

\n
\n
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n

\n\t\t\t\t\t\tModel<\/strong> \t\t\t\t\t<\/dt>\n
\n\t\t\t\t\t\t\t\t<\/p>\n

\t\t\t\t\t\t\t\t\t\t\tRaspberry Pi<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/dd>\n<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n

\n\t\t\t\t\t\tStorage<\/strong> \t\t\t\t\t<\/dt>\n
\n\t\t\t\t\t\t\t\t<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t8GB<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/dd>\n<\/p>\n<\/dl><\/div>\n<\/p><\/div>\n

\n <\/div>\n<\/p><\/div>\n

<\/p>\n

It is solely beneficial for tech-savvy customers, however the Raspberry Pi 5 is a tinkerer’s dream. Low-cost, extremely customizable, and with nice onboard specs, it is a strong base on your subsequent mini PC.<\/p>\n


\n <\/p>\n

<\/p>\n

<\/p>\n

<\/p><\/div>\n<\/p><\/div>\n

<\/p>\n

\n Copyfish
\n <\/h2>\n

\n One thing fishy occurred
\n <\/h3>\n
\n
\n \"A\n <\/picture>\n<\/p><\/div>\n<\/p><\/div>\n

Copyfish is free OCR (Optical Character Recognition) software program that permits you to copy textual content from pictures and PDFs. Today with AI constructed into telephones and computer systems we take this form of factor with no consideration, however again in 2017 it was an extemely helpful extension to have.<\/p>\n

Sadly, that was additionally the yr Copyfish began injecting advertisements into web sites individuals who use it had been visiting. Nevertheless, on this case, it wasn’t a malicious proprietor, previous or new, it was a hack perpetrated via the Chrome extension replace system. According to Bleeping Computer<\/a> the builders fell for a phishing try and so the hackers gained entry to the extension.<\/p>\n\n

In the long run, there isn’t any such factor as a secure extension. So uninstall those you do not use, do not have all of your extensions on each browser except you want them, and attempt to discover various options in case you can.<\/p>\n<\/p><\/div>\n