Version 3.39.4 of the MEGA Chrome extension has been compromised and can now steal the user's Monero in addition to other sensitive information, based on recent posts on Twitter and Reddit. The MEGA Chrome extension is a tool that claims to improve browser performance by reducing page load times, as well as providing a secure cloud storage service.
The official Twitter account of Monero (XMR) posted a notice,
PSA: The official MEGA extension has been compromised and now includes features to steal Monero: https : //t.co/vzWwcM9E5k
– Monero || #xmr (@monero) September 4, 2018
Another user tweeted that, in addition to Monero, the extension could also steal sensitive user data.
!!! WARNING !!!!!!! PLEASE, ATTENTION !!
THE LAST VERSION OF MEGA CHROME EXTENSION HAS BEEN CROSSED.
Version: 3.39.4
Detect username and password from Amazon, GitHub, Google, Microsoft portals !! Could take #mega #extension #hacked @ x0rz pic.twitter.com/TnPalqj1cz
"C & # 39; was an update for the extension and Chrome asked for a new permission (read data on all websites) This made me suspicious and I checked the extension code locally (which is mostly javascript anyway). source code of the extension on github […] There have been no recent commits, it seems to me that their Google Webstore account has been hacked or someone inside MEGA has done so.
At press time, the MEGA Chrome extension was not available for download on the Chrome Webstore. By clicking on the extension link, a 404 error occurred.
XMR, which – despite some statements to the contrary – is praised as private and "untraceable" cryptocurrency, has been the subject of illegal and illegal activities in the cryptographic space.
In many cases, cryptographers have exploited the power of Web visitors' computers to secretly extract XMR. In June, a report from McAfee detected 2.9 million samples of malware minerals, which work using the Coinhive code – a program designed to extract XMR from a web browser.
Last September, Cointelegraph reported that a group of Russian hackers had installed cryptographic malware on 9,000 computers over the course of two years. The hackers were hijacking machines to extract XMR and Zcash (ZEC), among other cryptocurrencies. Total earnings were estimated at $ 209,000 for Monero only.
XMR is the tenth largest cryptocurrency, with a market capitalization of over $ 2 billion at the time of printing. The cryptocurrency is currently trading above $ 138, after gaining 0.47 percent in the last 24 hours according to CoinMarketCap.
[ad_2]Source link