Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 10,2024

kartikbhat1.jpg

Mangaluru: A heart-wrenching tragedy unfolded in the quiet Bellayuru village on the outskirts of Mangaluru as a man’s life ended on a railway track following an apparent double murder. Authorities from the Mulki police station identified the man as Karthik Bhat, 32, whose lifeless body was discovered on the tracks with his head positioned on the rail, indicating a tragic suicide.

Nearby, police recovered keys to a scooter and a house, which eventually led them to uncover a series of chilling events. Following the trail, officers located Bhat’s scooter parked near Mahammayi Temple. Inside the vehicle, they found documents confirming his identity, including an RC, insurance papers, and his driving license.

Their search continued to Bhat's home in Pakshikere, Kemral village, where they discovered a locked room. With the keys retrieved from the tracks, police unlocked the door, only to be confronted by a horrifying sight. The bodies of Priyanka (28) and her young son Hriday (4) lay in a pool of blood, pointing to a brutal murder that occurred just hours before Bhat’s suicide.

Initial investigations suggest Bhat, beleaguered by ongoing family disputes, committed the murders of his wife and son on the evening of November 8 before tragically ending his own life. A death note found in his diary hinted at his mental state and tragic intentions.

Priyanka’s family, residing in Shivamogga, was informed of the incident. The couple, married for six years, now leaves behind grieving relatives and unanswered questions. Police have initiated formal proceedings, collecting statements from family members as they continue their investigation into the tragic sequence of events.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 19,2024

vikramgowda.jpg

The Karnataka Police’s Anti-Naxal Force (ANF) achieved a major breakthrough on Monday night by eliminating Vikram Gowda, one of Karnataka’s most wanted Naxal leaders for over two decades. The encounter occurred in the dense Kabbinale forest of Udupi district, marking a significant victory against Naxal insurgency in the region.

Who Was Vikram Gowda?

Hailing from Hebri in Udupi, Vikram Gowda, 44, was a prominent figure in the Naxal movement. He went underground in 2002, initially serving as a courier and fund collector before rising to lead a breakaway Naxal group. Despite having only a fourth-grade education, he was a staunch advocate for tribal rights and a key player in the movement’s survival in Karnataka.

Bounty: ₹3 lakh from Karnataka and ₹50,000 from Kerala.

Legacy: The last major Naxal leader in Karnataka after the 2021 arrest of B G Krishnamurthy.

The Encounter

Police revealed that Gowda and his team visited Kabbinale village to collect groceries on Monday night. Acting on a tip-off, ANF ambushed the group. When the Naxals opened fire, ANF responded, leading to Gowda's death.

Escapees: Three Naxals fled, including prominent members Latha (aka Mundgaru Latha) and Raju.

Significance: This was the first Naxal casualty in Karnataka in over two decades.

Home Minister G. Parameshwara confirmed the operation, stating, “Gowda was elusive for 20 years, escaping multiple encounters. His death is a critical step in dismantling Naxal operations in the region.”

The Decline of Naxal Activity in Karnataka

Karnataka's Naxal movement has been dwindling, with members seeking refuge in Kerala and Tamil Nadu. The group’s strength had reduced to just 19 members by 2018, but recent sightings indicate attempts at revival:

2023 Activity: Reports of Gowda-led movements in the Kodagu and Hassan districts reignited concerns.

Political Heat: The BJP criticised the Congress government, alleging it created a “safe haven” for Naxals.

A Glimpse into Gowda’s Past

Personal Life: Gowda’s ex-wife, Savitri (alias Rajita), was arrested in 2021. She was a senior Naxal commander involved in insurgency since 2004.
Rehabilitation Efforts: Since 2013, Karnataka’s rehabilitation policy has seen 14 Naxals surrender and reintegrate into mainstream society.

A Milestone in Karnataka’s Fight Against Insurgency

The operation signifies a decisive blow to Naxal resurgence in the Western Ghats. While the ANF continues its search for escapees, the Karnataka government reaffirmed its commitment to offering rehabilitation to those willing to surrender.

As Karnataka celebrates this triumph, the message is clear: there is no room for insurgency in the state.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 18,2024

resort.jpg

Mangaluru: The Ullal police have arrested Manohar, the owner of Vazco Beach Resort, and its manager Bharath in connection with the drowning of three college girls from Mysuru at the resort’s swimming pool on November 17.

City Commissioner of Police Anupam Agrawal confirmed the arrests, stating that a case has been registered under Section 106 of BNS. The bodies of the victims, all in their twenties, have been handed over to their parents. The women had arrived at the resort for a weekend getaway on November 16.

Following the tragic incident, the resort was sealed by officials led by Mangaluru Assistant Commissioner Harshavardhan. The trade license of the resort, issued on June 13, 2024, has been suspended, and the tourism department has temporarily revoked the resort's registration. These actions prohibit the resort from engaging in any tourism-related activities until further notice.

Someshwara TMC Chief Officer stated that the suspension was due to the resort's failure to implement adequate safety measures, which resulted in the loss of three lives. Further investigations are underway.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.