Skip to main content

20 million Chrome users are fooled into downloading fake ad blockers

Google removed a number of fake ad blockers from its Chrome store after an AdGuard researcher discovered that these extensions concealed malicious scripts. The code hidden within these fake ad blocking extensions was used to collect information about a user’s browsing session and to change the browser’s behavior.

Some of these extensions were popular, with one fake ad blocker garnering as many as 10 million downloads. Even the least popular extension, Webutation, had 30,000 downloads.

These malicious ad-blocking extensions merely copied the legitimate ad blocking code from real ad blockers and added its own harmful one.

“All the extensions I’ve highlighted are simple rip-offs with a few lines of code and some analytics code added by the ‘authors,’” AdGuard’s Andrew Meshkov wrote. “Instead of using tricky names they now spam keywords in the extension description trying to make to the top search results.”

Given that most casual users don’t really pay attention to the name of an extension as long as it was somewhere near the top of their search results, it’s easy to deceive a large number of Chrome users to download fake ad blockers. Combined, all five of the flagged — and now removed — ad blockers generated 20 million downloads, according to AdGuard.

“Basically, this is a botnet composed of browsers infected with the fake adblock extensions. The browser will do whatever the command center server owner orders it to do,” he wrote.

The malicious code sends the data it collects, including your browsing information, to a remote server. The server then sends a command to an extension that is concealed inside an innocent image, and the commands are executed as scripts to change the way your browser behaves.

To protect yourself, AdGuard recommends that you only download browser extensions from trusted authors and companies. If you don’t know the author, Meshkov recommends skipping the extension. Even if the extension comes from a trusted author, the software could be sold to another party in the future, which could then change the intended use or behavior of the extension.

If you’re looking for an ad block, be sure to check out our list of recommendations for some of the best ad blocking extensions.

Editors' Recommendations

Chuong Nguyen
Silicon Valley-based technology reporter and Giants baseball fan who splits his time between Northern California and Southern…
1.5% of Chrome users’ passwords are known to be compromised, according to Google
A password screen with an indecipherable password inputted.

1.5% of passwords used in Chrome are unsafe and have been released in data breaches, according to new information from Google.

In February, a new feature was introduced to the Google Chrome browser which checks whether users' passwords are secure. Password Checkup is a free download that scans a database of 4 million compromised passwords and informs users if their password is among them and they need to change it. The database of passwords is collated from known third-party data breaches and when a user enters their password, it is checked against the list.

Read more
Everyone’s mad about Google blocking ad blockers in Chrome. Here’s why
Google Chrome photo

An ad-free web browsing experience may only be available to those willing to pay for it.

At least, that appears to be the future waiting for Google Chrome. In a recent update, Google has moved to hamper Chrome’s ad-blocking capabilities, while also announcing that the deprecation of that feature will not apply to Google’s paid G Suite Enterprise subscribers.

Read more
Microsoft Surface Laptop 5, Surface Pro 9 heavily discounted today
The Surface Pro 9 in laptop mode on a table.

Microsoft's Surface devices are well known for their versatility and performance, but they command premium prices. That's why there's always high demand for Surface Laptop and Surface Pro deals, as who doesn't want to enjoy a discount when making a huge investment? If you're interested, Best Buy is offering the Microsoft Surface Laptop 5 at $300 off, which brings its price down to $1,000 from $1,300, and the Microsoft Surface Pro 9 at $540 off, which lowers its price also to $1,000 from $1,540, ahead of the arrival of the consumer versions of the Surface Laptop 6 and Surface Pro 10. You need to push through with your transaction as soon as possible if either of these bargains caught your attention, as we're not sure how much time is remaining before they disappear.
Microsoft Surface Laptop 5 -- $1,000, was $1,300

The Microsoft Surface Laptop 5 is a traditional Windows 11 laptop that's powered by the 12th-generation Intel Core i5 Evo processor, Intel Iris Xe Graphics, and 8GB of RAM. It won't match up to the performance of the best laptops, but it's going to be more than enough to handle daily tasks for work or school. The laptop features a 13.5-inch PixelSense touchscreen with vibrant colors and sharp details, a battery that can last up to 18 hours on a single charge, and a 512GB SSD that provides ample storage space for your files. The Microsoft Surface Laptop 5 also comes with a 720p webcam and dual far-field Studio Mics for clear video calls.

Read more