Official Google announcements or security update releases

Malware Hits 300,000 Browsers, Exploits Microsoft and Google Cloud Services

Aug 9, 2024, 04:12 PM

A significant malware campaign has been identified, affecting 300,000 browsers by force-installing malicious Chrome extensions and patching DLLs. The malware utilizes PowerShell payloads to modify web browser shortcut links, ensuring the malicious extensions load and disabling the browser's automatic update mechanism. This tactic prevents Chrome's built-in protections from mitigating the threat. The malware is reportedly using cloud storage services from Microsoft and Google to store and spread the malicious software, highlighting a concerning vulnerability in these platforms.