Technology
Chrome, Firefox browser extensions leaked millions of users' data
Washington, July 20
Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.
According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.
The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.
"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.
"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.
The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.
Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.
Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.
The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.
"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.
People who didn't download the extensions may also be affected.
"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.
Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".
The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.
The security expert has suggested users to delete all browser extensions they have installed in the past.
According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.
The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.
"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.
"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.
The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.
Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.
Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.
The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.
"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.
People who didn't download the extensions may also be affected.
"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.
Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".
The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.
The security expert has suggested users to delete all browser extensions they have installed in the past.
30 minutes ago
VP Harris to Unveil New Economic Policies to Boost Wealth and Incentives
48 minutes ago
Polls Indicate Kamala Harris Closing Gap on Trump as Public Sentiment Improves
1 hour ago
US Envoy Eric Garcetti Highlights Shared Commitment to Cultural Heritage with Return of Antiquities to India
1 hour ago
US Focuses on Strengthening Ties with Sri Lanka, Congratulates Anura Kumara Dissanayake on Election Win
1 hour ago
No Ocean Can Distance You from India: PM Modi Tells Indian Diaspora in US
1 hour ago
Trump Declares No Fourth Presidential Run if He Loses 2024 Election
3 hours ago
PM Modi, Kuwaiti Crown Prince discuss ways to add vigour to bilateral ties
3 hours ago
At diaspora event, PM Modi projects India as confident emergent power, accelerator of peace
3 hours ago
Shehnaaz Gill turns heads with striking photoshoot in chic white dress
3 hours ago
‘Laapataa Ladies’, and the legacy of Aamir Khan Productions with India’s official Oscar submissions
3 hours ago
Israel to intensify strikes against Hezbollah: IDF chief
3 hours ago
Kiran Rao on ‘Laapataa Ladies’: Great privilege to be selected from among such amazing Indian films
3 hours ago
Israel has dealt Hezbollah blows it could not have imagined: Netanyahu