Bitcoin Forum
July 24, 2019, 03:39:59 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Help to report scam extensions on Cromestore that steal your wallets  (Read 181 times)
oapieNL
Member
**
Offline Offline

Activity: 209
Merit: 10


View Profile
April 08, 2018, 09:16:40 PM
Last edit: April 10, 2018, 11:30:44 AM by oapieNL
Merited by suchmoon (3), European Central Bank (2), Decoded (2)
 #1

There are many spam tools for trading. Especially an extension that steals all coins from your wallet.
Only together can we already remove part of the cromestore later by reporting them and giving a bad review.

Hopefully we can collect a whole list and report jointly about this so that they disappear from the cromestore. I always look when someone has reacted. but that's what he did, I saw. but I found out later when I clicked several languages ​​unfortunately there were bad reviews.

Here the first extension that steals all your coins from your wallet at once on yobit.
This extension is called Yobit neural bot

http://chrome.google.com/webstore/detail/yobit-neural-bot/fommbgdllfjnhlhiiochcogjjocbdeco

Give it a review in your own language and also report abuse so that it disappears from the google crome store.

Hopefully according to more that we can make disappear
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1563939599
Hero Member
*
Offline Offline

Posts: 1563939599

View Profile Personal Message (Offline)

Ignore
1563939599
Reply with quote  #2

1563939599
Report to moderator
1563939599
Hero Member
*
Offline Offline

Posts: 1563939599

View Profile Personal Message (Offline)

Ignore
1563939599
Reply with quote  #2

1563939599
Report to moderator
European Central Bank
Legendary
*
Offline Offline

Activity: 1288
Merit: 1080



View Profile
April 08, 2018, 09:57:28 PM
 #2

i automatically wouldn't trust any chrome extension. even more so with anything crypto related. people would be better off forgetting the idea completely and never adding anything. if you need the info and services they provide there's almost always a more secure way of doing it.  

and don't forget chrome apps. the ledger wallet has had fake ledger management apps show up.

kudos for reporting them all the same. keep it up.
oapieNL
Member
**
Offline Offline

Activity: 209
Merit: 10


View Profile
April 09, 2018, 12:41:12 AM
Last edit: April 10, 2018, 11:31:06 AM by oapieNL
 #3

This chrome extension steal also your complete wallet on yobit.
yobit trading bot
Link
https://chrome.google.com/webstore/detail/yobit-trading-bot/cgmikolceifcfpcaomgpobonjipcecoc/
allahabadi
Full Member
***
Offline Offline

Activity: 518
Merit: 126



View Profile
April 09, 2018, 09:11:19 PM
 #4

I can't find either of the two.

npredtorch
Legendary
*
Offline Offline

Activity: 1120
Merit: 1004


View Profile
April 09, 2018, 10:47:04 PM
 #5

I can't find either of the two.

Looks like it already had been removed.
Personally, I never used any 3rd party & unfamiliar extensions related to crypto.(only pinterest, pdf and some full screenshot ext.)
Also, I always have a mindset that if I install something, my saved password along with history would be scanned by such extensions.

Zapo
Copper Member
Full Member
***
Offline Offline

Activity: 224
Merit: 156


Stay Dangerous!


View Profile
April 10, 2018, 04:31:54 AM
 #6

Nice initiative oapieNL! I'd merit you if I had the Smerit.

I'd personally not trust any google extensions, with the exception of LastPass Password Manager[1]. The google chrome store is very different to what some people may compare it to, which are the app and google play stores. It is much easier to get an app listed on the web store and a lot of users are making fake trading bots, some fake steam helpers. [2] The only trading bot I'd trust would be Gunbot.

This chrome extension steal also your complete wallet on yobit.
yobit trading bot
Link
https://chrome.google.com/webstore/detail/yobit-trading-bot
Nice catch.

I can't find either of the two.
As npredtorch said, probably removed. Google is usually fast with this and I've seen shady/scam apps removed from the google play store in a matter of hours.

[1] Great app, recommended. Personally, use the premium version.
[2] These are extensions that instead of helping you check items and trade easier, they'll hack your account and either trade your items away or spam your friends profile with malware.

~Zapo

oapieNL
Member
**
Offline Offline

Activity: 209
Merit: 10


View Profile
April 10, 2018, 11:31:56 AM
 #7

I have updated the links. now should works fine.

Unfortunately they have not been removed yet. I had forgotten and part in the links.

If we misuse all those scam extensions in the chrome store with the information that they steal all your credit from your account, then I think they will disappear soon.
Decoded
Legendary
*
Offline Offline

Activity: 1246
Merit: 1024


give me your cryptos


View Profile
April 10, 2018, 10:21:37 PM
 #8

I have updated the links. now should works fine.

Unfortunately they have not been removed yet. I had forgotten and part in the links.

If we misuse all those scam extensions in the chrome store with the information that they steal all your credit from your account, then I think they will disappear soon.

These are damn annoying, I've seen apps on the android playstore, I generally stay away from them. But Chrome extensions now?

Real nice work, post any bad apps here and we'll all help get them down.

looking for a signature campaign, dm me for that
oapieNL
Member
**
Offline Offline

Activity: 209
Merit: 10


View Profile
April 11, 2018, 07:20:08 AM
 #9

Yes, the scammers are also in the chrome store.
If you install one you have to look carefully at the written reviews. Google sets the language that you use by default. If no review has been written in your language, you will see gene reviews.
 
You must manualy sellect all reviews languages.

Then you definitely get a complete list of reviews.


Jedgar
Member
**
Offline Offline

Activity: 222
Merit: 15


View Profile
April 19, 2018, 02:19:51 PM
 #10

Yes, the scammers are also in the chrome store.
If you install one you have to look carefully at the written reviews. Google sets the language that you use by default. If no review has been written in your language, you will see gene reviews.
 
You must manualy sellect all reviews languages.

Then you definitely get a complete list of reviews.


To feel safe when dealing with cryptocurrency it is better to use no extensions at all. Just a pure browser that runs in the sandbox. IMHO. I prefer Firefox confined into sandbox of Comodo.
coinwizard_
Jr. Member
*
Offline Offline

Activity: 336
Merit: 5

Most Advanced Crypto Exchange on the Blockchain


View Profile
April 21, 2018, 12:05:54 PM
 #11

The only chrome extension that is worth installing (regarding crypto trading) is metamask. All others need to be done with extra care, and only install if really needed. I run ad blocker, hopefully they won't get hacked and turn into a malware miner

CRYPTOCIRCLEX | THE MOST ADVANCED CRYPTO EXCHANGE ON THE BLOCKCHAIN
✪╠════════════════════════════════════════════════════════════╣✪
oapieNL
Member
**
Offline Offline

Activity: 209
Merit: 10


View Profile
April 22, 2018, 11:57:54 PM
 #12

etheradreslookup is only a good extension  i know for now.

this extension protect you for scam ether adresses and website links
metamask is not good anymore. Tracking all your internet traffic
oapieNL
Member
**
Offline Offline

Activity: 209
Merit: 10


View Profile
May 04, 2018, 06:52:33 AM
 #13

Found this chrome extension.
  Google Authenticator  .
Dont use this chrome extension
srujan reddy added this extension on the crome store and not google!

https://chrome.google.com/webstore/detail/google-authenticator/njkhnbmlaefgkjpaghgphiceaocdblgl?hl=nl


If you click on all reactions you can see some crypto people also using this extension.

I do not recommend using this

crypto mania
Member
**
Offline Offline

Activity: 434
Merit: 92


View Profile
May 11, 2018, 05:39:26 AM
Last edit: May 11, 2018, 05:49:45 AM by crypto mania
 #14

A cybersecurity firm called Trend Micro issued a statement warning users of new malware that targets crypto wallets, stealing login data and hijacking transactions in the process.

In the past, the malware, FacexWorm, was shared via Facebook links, and once a user opens an infected link all their data is stolen, and their PCs processing power is drained to fuel cryptocurrency mining of which user is not aware of.

But currently, the malware is in the form of a Google Chrome extension. Stealing users’ Google, MyMonero, and Coinhive data is the primary goal of FacexWorm. Plus, it can send carry out unauthorized transactions and issue payments to the attacker’s wallet. Finally, FacexWorm is capable of stealing funds on various cryptocurrency exchanges. The cybersecurity company highlighted Poloniex, HitBTC, Bitfinex, Ethfinex, and Binance.

Bypassing Google Application Validation Tools
The campaign operators created copies of legitimate extensions and inject a short, obfuscated malicious script to start the malware operation.
Radware believes that this is done to bypass Google’s extension validation checks. To date, Radware’s research group has observed seven of these malicious extensions, of which it appears four have been identified and blocked by Google’s security algorithms. Nigelify and PwnerLike remain active.

Known Extensions




source:
https://bitcoinplay.net/crypto-users-beware-chrome-extension-targets-your-wallets/
https://www.express.co.uk/life-style/science-technology/956249/Google-Chrome-update-extensions-web-store-security-Facebook-Messenger-YouTube-scam
https://blog.radware.com/security/2018/05/nigelthorn-malware-abuses-chrome-extensions/

BEST BTC FAUCET claim every hour, paying for years https://freebitco.in/?r=118513
FREE BTC LOTTERY!!! Try to win BTC for free every 8 hours https://8bet.io/?r=85q51
FREE AIRDROPS AND COINS EVERY 24 HOURS!!! https://www.qoinpro.com/20d2f6d120c4ea4ed6332e1f41db8919
crypto mania
Member
**
Offline Offline

Activity: 434
Merit: 92


View Profile
May 16, 2018, 07:39:13 AM
Merited by European Central Bank (5)
 #15

The only chrome extension that is worth installing (regarding crypto trading) is metamask. All others need to be done with extra care, and only install if really needed. I run ad blocker, hopefully they won't get hacked and turn into a malware miner

This is a valid concern with ad blockers and that they can be a target for hackers to inject a malware or switch into resources hungry miner. If you plan on using an ad blocker, it's well worth doing a bit of background research on browser extensions before installing them to be sure they have known authors and are recommended by reputable sources.

AdBlockers are the most downloaded and used add-ons on google. There is a big incentive to hack established and well-known adblocker or even to develop a new one with viruses. Until today there were already few malicious adblockers on Google downloaded more as 20 million times. This is an army of bots.

Five most known malicious adblocker add-ons  already removed by Google:
- AdRemover for Google Chrome™ (10 million+ users)
- uBlock Plus (8 million+ users)
- [Fake] Adblock Pro (2 million+ users)
- HD for YouTube™ (400,000+ users)
- Webutation (30,000+ users)



Source:
https://www.techradar.com/news/google-has-kicked-five-malicious-ad-blockers-off-the-chrome-store
https://thehackernews.com/2018/04/adblocker-chrome-extention.html




BEST BTC FAUCET claim every hour, paying for years https://freebitco.in/?r=118513
FREE BTC LOTTERY!!! Try to win BTC for free every 8 hours https://8bet.io/?r=85q51
FREE AIRDROPS AND COINS EVERY 24 HOURS!!! https://www.qoinpro.com/20d2f6d120c4ea4ed6332e1f41db8919
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!