

At the time this post went live, some, but not all, of the malicious extensions remained available for download from Google and Microsoft.Īvast researchers found malicious code in the JavaScript-based extensions that allows them to download malware onto an infected computer. The add-ons billed themselves as a way to download pictures, videos, or other content from sites including Facebook, Instagram, Vimeo, and Spotify.

In all, researchers from Prague-based Avast said they found 28 extensions for the Google Chrome and Microsoft Edge browsers that contained malware.

As many as 3 million people have been infected by Chrome and Edge browser extensions that steal personal data and redirect users to ad or phishing sites, a security firm said on Wednesday.
