Fake Google Chrome Extension Is A Trojan
April 22, 2010 Computer Safety Tip
If you ever thought that cybercriminals were extremely clever at what they do, then until you understand what has 
recently taken place, you don’t even know the half of it. More and more people across the globe have been choosing to make use of Google Chrome as their browser of choice, but unfortunately malicious online criminals have caught on to this and are now taking advantage of the situation. Google Chrome users need to be aware of the current scam which is taking place, all across the world.
Basically Google Chrome users will get an email which alerts them to the factor that a new extension of Chrome has been developed, in order to help facilitate their access to various documents and emails. This message is actually a malicious link that Chrome users need to be extremely careful of. This link which Chrome users are urged to follow in order to download the new extension actually directs them to a site which has been made to look exactly like the Google Chrome extensions page.
The truth of the matter is that instead of the extension which is promised, users are provided with a false application which is all part of a scam in order to infect their computers with malicious malware. Chrome users may want to be aware of the factor that although the application may contain the same description of an original Google Chrome extension, the file name is different. Instead of the normal expected “.crx” extension, it contains an “.exe” tail.
This is actually a malicious Trojan which has been identified by BitDefender as Trojan.Agent.20577. This application is seriously dangerous due to the factor that it is able to modify the Windows HOSTS files in an attempt to block access to Google as well as to Yahoo websites. Each time that a user attempts to access Google or Yahoo by typing it into their web browser, they will get redirected to another IP address which is malicious.
Once the user has been redirected to another dangerous IP address, this enables the creators of the malware to actually intercept the user’s calls in order to effectively reach the respective web sites. This is basically a big part of the set up which helps malicious criminals to redirect the browsers of innocent users to this dangerous malware and malicious websites. Bear this all in mind the next time you are considering downloading a Google Chrome extension.
Comments (2)
How can i remove that trojan?
just use firefox, chrome just sells your habits to corporations to better their advertising using cookies and other methods, ff lets you remove and block those malicious cookies, as well as ads just by using extensions