Fake Google Chrome Extension Downloaded by Over 200,000 Users

Share post:

Researchers have discovered a Google Chrome extension called Internet Download Manager, which is an adware and has been downloaded by more than 200,000 users.

Although the extension installs a well-known and legitimate download manager program, researchers were able to show some irregular behaviors through the extension. These irregular behaviors include opening links to spammy sites, changing the default browser search engine, and more display pop-ups asking users to download more “patches” and unwanted programs.

After installing the fake ‘Internet Download Manager,’ users are prompted to install an executable program from the Puupnewsapp website and to download a “Windows patch” ZIP file.

Further investigation reveals that there is a legitimate Windows program called Internet Download Manager from software company Tonec. Tonec offers Internet Download Manager extensions for Firefox and Chrome, and the authentic Chrome extension that the company provides is called the “IDM Integration Module.”

However, the fake ‘Internet Download Manager’ Chrome extension is maintained by a website called “Puupnewsapp,” which claims that “it increases your download speed by up to 500%,” making it a “super software” that is used to download games, movies, music and “large files in minutes.”

The sources for this piece include an article in BleepingComputer.

SUBSCRIBE NOW

Related articles

Cyber Security Today, May 3, 2024 – North Korea exploits weak email DMARC settings, and the latest Verizon analysis of thousands of data breaches

This episode reports on warnings about threats from China, Russia and North Korea, the hack of Dropbox Sign's infrastructure

Hashtag Trending for World Password Day, Thursday, May 2nd, 2024

Security firm Okta warns of an unprecendented password stuffing attack that is piggybacking on regular user’s mobile and...

Google Chrome’s new post-quantum cryptography causes connection issues

The latest update to Google Chrome, version 124, which integrates a new quantum-resistant encryption mechanism, has led to...

UK legislation bans weak passwords

Starting Monday, the UK will enforce new laws banning the sale of devices with weak default passwords such...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways