Malware capabilities:

• Produce log files for each time the victim clicks on a URL.
• Redirect the users to advertisements and phishing websites
• Steal personal data (birthday, email address, first sign-in time, last login time, device information, device name, operating system, browser details, IP address)
• Prevent detection even by skilled users in web development

Impacts

Technical Impact:

• Steal personal/ sensitive information
• Download further malware
• Control and monetize from browser traffic

Business Impact:

• Data leaks can have an adverse impact on the victims privacy.

List of infected extensions

Mitigations

• Use real-time web page monitoring tools
• Use web-proxy filtering to block access of unwanted websites