Chrome Extensions Downloaded By Half A Million Users Found To Be Used For Click Fraud

Nyoogle. Stickies.  Lite Bookmarks. They all sound like they could be some fun browser extensions to add onto your version of Chrome. Well, they aren’t, although 500,000 people downloaded them. Researchers at ICEBRG found that those and another called HTTP Request Header are likely being used in a click fraud scam. It was discovered that those extensions were visiting advertising-related web links, resulting in a neat little payday for fraudsters. But that’s not all that add-ons and extensions can be used for. This example shows how they can just as easily be used to install other, more dangerous types of malware too.

Click fraud is up and coming. Those who utilize this to make a buck get paid each time one of their ads is clicked. The ads are designed to direct to a particular website that pays the posters of the ads each time their ads go to the company’s website. It can be quite lucrative and it’s nearly impossible to catch those engaging in this type of fraudulent behavior, so the return on their malvertising investment is well worth the risk.

Users tend to trust the add-ons and extensions that go along with their favorite browsers, so attacks used in this way can be even more damaging. If you are doing some action on your computer or mobile device and a request pops up to install an add-on or extension, make sure it’s necessary before clicking the affirmative option. It’s better to cancel out, research what the extension is doing, and determine whether you can use the product without it first. If you can, don’t install it. The fewer of these extras you have attached to whatever browser you use, the better.

Were this method to be used to install ransomware, spyware, or other type of more malicious malware, a lot of damage can be done to the victims. So take some time to make sure you really want to click on ads you see as well. Certainly not all of them are malicious. In fact, most probably are not. But it only takes one click on a bad one for your computer or device to be compromised. It is worth the time to go directly to the website of the company in the ad to determine if you want to look at their products further.