Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 11,2024

birensingh.jpg

The Manipur Kuki MLAs have released a statement calling out Solicitor General Tushar Mehta's 'lies' in the Supreme Court. In a joint statement, the MLAs, including those from the Bharatiya Janata Party, said they had not had any meeting with the Chief Minister since May 3, 2023, nor did they intend to meet him in the future as “he was the mastermind behind the violence”.

As per the MLAs, the SG lied about state CM N Biren Singh speaking to Kuki MLAs to control the situation there, in order to halt a Supreme Court probe into the leaked tapes which allege that Singh has been complicit in the violence that broke out between Kukis and Meitis there.

"We...clarify that we have never had any meeting with Chief Minister, Shri N. Biren Singh since May 3, 2023, nor have any intention to meet him in future as he is the mastermind behind the violence and ethnic cleansing of our people from the Imphal valley, which is continuing till today, the latest being the brutal killing and burning of Mrs Zosangkim Hmar on November 7, 2024," the letter read, while condemning the recent 'barbaric' killing of the woman there, and noting the SG's assertion is 'tantamount' to misleading the top court.

“We, the undersigned ten MLAs, have come to know that during the Supreme Court hearing held on November 8, 2024, the Solicitor General of India submitted that ‘CM is meeting all Kuki MLAs and trying to bring the situation down to get peace’. In this connection, we hereby categorically state that this submission is a blatant lie and tantamount to misleading the Hon’ble Supreme Court of India,” the statement said.

The Supreme Court, while hearing a petition by a Kuki organisation, asked that it submit audio tapes to substantiate its claim that the Chief Minister was instrumental in inciting and organising violence in the northeastern State.

Solicitor-General Tushar Mehta orally informed the court that the Chief Minister was meeting all the Kuki-Zo MLAs and that peace in the State had come at a huge cost.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 12,2024

gazaresistence.jpg

The Palestinian Hamas resistance movement says its fighters have killed at least 20 Israeli soldiers in northern parts of the besieged Gaza Strip in just two days, in retaliation for the occupying regime’s genocidal war on the Palestinian territory.

In a statement on Monday evening, Hamas said that fighters of its military wing, al-Qassam Brigades, “killed at least five occupation soldiers” in northern parts of the coastal territory earlier in the day.

It added that Hamas fighters also killed 15 Israeli soldiers in the war-ravaged region on Sunday.

The resistance movement’s “qualitative operation … confirms once again the failure of the criminal Zionist entity to suppress and eradicate the Palestinian resistance, which continues to direct qualitative strikes against its terrorist soldiers,” Hamas further said on its Telegram channel.

Palestinians have increased their resistance operations in the face of intensified Israeli aggression in northern Gaza that has claimed the lives of more than 1,000 over the past weeks.

“Our valiant resistance is waging a war of attrition with the criminal enemy, inflicting daily losses on its soldiers and vehicles, and all of [Israeli prime minister Benjamin] Netanyahu’s bets and dreams of achieving any of his goals are failing,” the Gaza-based resistance movement added.

Hamas also vowed that Israel’s ongoing crimes and aggression against Gaza would be met with increased resistance and painful strikes, which will continue until the aggression against Palestinians ends and the regime fully withdraws from the blockaded territory.

As the war in Gaza enters its 14th month, the Health Ministry reports that Israeli attacks have killed at least 43,603 Palestinians and wounded 102,929 others.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 15,2024

amitshah.jpg

Union minister Amit Shah on Friday, November 15, said PM Narendra Modi will amend the Waqf Act despite opposition from leaders like Uddhav Thackeray and Sharad Pawar.

"Modi ji wants to change the Waqf Board law, but Uddhav ji, Sharad Pawar and Supriya Sule are opposing it," Shah said, addressing a rally at Umarkhed in Maharashtra's Yavatmal district.

"Uddhav ji, listen carefully, you all can protest as much as you want, but Modi ji will amend the Waqf Act," he said. Shah said there are two camps in the November 20 Maharashtra assembly polls, one of 'Pandavas' represented by the BJP-led Mahayuti and the other of 'Kauravas' represented by Maha Vikas Aghadi.

"Uddhav Thackeray claims that his Shiv Sena is the real one. Can the real Shiv Sena go against renaming Aurangabad to Sambhajinagar? Can the real Shiv Sena go against renaming Ahmednagar to Ahilyanagar? The real Shiv Sena stands with the BJP," Shah said.

"Rahul Baba used to say that his government would credit money in the accounts of the people instantly. You were unable to fulfil your promises in Himachal, Karnataka, and Telangana," he said.

Shah said the Mahayuti alliance has promised that women will get Rs 2,100 per month under the Ladki Bahin Yojana. "Kashmir is an integral part of India and no power in the world can snatch it away from us," Shah said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.