Fake Google Chrome Extension Downloaded by Over 200,000 Users

Share post:

Researchers have discovered a Google Chrome extension called Internet Download Manager, which is an adware and has been downloaded by more than 200,000 users.

Although the extension installs a well-known and legitimate download manager program, researchers were able to show some irregular behaviors through the extension. These irregular behaviors include opening links to spammy sites, changing the default browser search engine, and more display pop-ups asking users to download more “patches” and unwanted programs.

After installing the fake ‘Internet Download Manager,’ users are prompted to install an executable program from the Puupnewsapp website and to download a “Windows patch” ZIP file.

Further investigation reveals that there is a legitimate Windows program called Internet Download Manager from software company Tonec. Tonec offers Internet Download Manager extensions for Firefox and Chrome, and the authentic Chrome extension that the company provides is called the “IDM Integration Module.”

However, the fake ‘Internet Download Manager’ Chrome extension is maintained by a website called “Puupnewsapp,” which claims that “it increases your download speed by up to 500%,” making it a “super software” that is used to download games, movies, music and “large files in minutes.”

The sources for this piece include an article in BleepingComputer.

SUBSCRIBE NOW

Related articles

Cyber Security Today, Week in Review for week ending Friday May 17, 2024

Welcome to Cyber Security Today. This is the Week in Review for the week ending Friday, May 17th,...

Cyber Security Today, May 17, 2024 – Malware hiding in Apache Tomcat servers

Malware hiding in Apache Tomcat servers, new backdoors found, and more Welcome to Cyber Security Today. It's Friday, May...

MIT students exploit blockchain vulnerability to steal 25 million dollars

Two MIT students have been implicated in a highly sophisticated cryptocurrency heist, where they reportedly exploited a vulnerability...

Cyber Security Today, May 15, 2024 – Ebury botnet still exploits Linux servers, Microsoft, SAP and Apple issue security updates

The Ebury botnet continues to exploit Linux servers, Microsoft, SAP and Apple issue security updates, and more. Welcome to...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways