17 posts · Last used Aug 10
Microsoft removes 119 Edge Extensions that hide Malware in Images and Fonts.
Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud.
https://microsoftedge.github.io/edgevr/assets/files/stego_ad/Microsoft_Edge_Security_StegoAd.pdf
The company calls it StegoAd, a mash-up of steganography and adware, and ties 119 extensions to a single threat actor it says has been active since at least 2021.
The extensions were the kind people install without a second thought: ad blockers, VPNs, translators, video downloaders. Each one did its job and earned reviews. The malicious code stayed dormant until the extension cleared a stack of evasion checks, which is how it sat in the store for years.
https://microsoftedge.github.io/edgevr/posts/Inside-StegoAd-How-We-Disrupted-a-Massive-Malicious-Extension-Campaign/
⁉️Combined, the 119 extensions had an install base of up to 2.6 million users. Microsoft is clear that this is a ceiling, not a victim count. A multi-day delay, server-side validation, and a 10% execution gate on some variants meant the payload never fired for many installs. How many people were actually compromised is not known.⁉️
#microsoft #edge #security #privacy #infosec #tech #media #news
Uninstalled Microsoft Edge (Chrome engine)
Uninstalled Brave (Chrome engine)
Uninstalled Google Chrome
Firefox Developer Edition (with uBlock Origin) is now my only browser
#Browser #Microsoft #Google #Brave #Edge #MicrosoftEdge #Chrome #GoogleChrome #Firefox #uBlockOrigin #DID #DUT #unplugTrump #unplugBigtech
