1. Home
  2. Chrome, Firefox browser extensions leaked millions of users' data

Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

About text formats
  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 10,2020

New Delhi, Jul 10: With the highest single-day spike of 26,506 COVID-19 cases and 475 deaths reported in the last 24 hours, the total number of COVID-19 cases in India reached 7,93,802 on Friday, according to the Union Ministry of Health and Family Welfare.

Out of the total number of cases, 2,76,685 are active, 4,95,513 have been cured/discharged/migrated and 21,604 have died so far due to the infection.

With as many as 2,30,599 COVID-19 cases, Maharashtra continues to remain the worst-affected state, followed by Tamil Nadu (1,26,581) and Delhi (1,07,051).

Meanwhile, 2,83,659 samples were tested for coronavirus on Thursday, taking the total number of samples tested up to July 9 to 1,10,24,491, according to the Indian Council of Medical Research (ICMR).

Comments

Add new comment

About text formats
  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
March 10,2020

Tehran, Mar 10: Twenty-seven people have died from methanol poisoning in Iran after rumours that drinking alcohol can help cure the novel coronavirus infection, state news agency IRNA reported on Monday. The outbreak of the virus in Islamic republic is one of the deadliest outside of China, where the disease originated.

Twenty have died in the southwestern province of Khuzestan and seven in the northern region of Alborz after consuming bootleg alcohol, IRNA said.

Drinking alcohol is banned in Iran for everyone except some non-Muslim religious minorities. Local media regularly report on lethal cases of poisoning caused by bootleg liquor.

A spokesman for Jundishapur medical university in Ahvaz, the capital of Khuzestan, said 218 people had been hospitalised there after being poisoned.

The poisonings were caused by "rumours that drinking alcohol can be effective in treating coronavirus," Ali Ehsanpour said.

The deputy prosecutor of Alborz, Mohammad Aghayari, told IRNA the dead had drunk methanol after being "misled by content online, thinking they were fighting coronavirus and curing it." If ingested in large quantities, methanol can cause blindness, liver damage and death.

Iran has been scrambling to contain the spread of the COVID-19 illness which has hit all of the country's 31 provinces, killing 237 people and infecting 7,161.

According to IRNA, 16 out of 69 confirmed cases have died of coronavirus infection in Khuzestan as of Sunday.

Comments

Add new comment

About text formats
  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 21,2020

Lucknow, Jan 21: Defending his brainchild, the Citizenship Amendment Act (CAA), Union home minister Amit Shah on Tuesday said the new law will not be scrapped despite the countrywide protests against it.

Addressing a rally here to drum up support for the CAA, Shah also declared that construction of a Ram temple "touching the skies" in Ayodhya will begin within three months.

He said there is no provision in the amended law for taking anyone's citizenship away. "A canard is being spread against the CAA by the Congress, SP, BSP, and Trinamool Congress. The CAA is a law to grant citizenship," he added.

"I want to say that irrespective of the protests this will not be withdrawn," he added.

Shah challenged Congress leaders to hold a discussion with him on CAA at a public forum.

He named Congress leader Rahul Gandhi, Samajwadi Party's Akhilesh Yadav, Bahujan Samaj Party's Mayawati and TMC chief Mamata Banerjee while throwing the "challenge".

Congress has become blind due to vote bank politics,"he said. He also blamed the Congress for Partition.

Comments

Add new comment

About text formats
  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.