Annex Security

80 posts

Annex Security banner
Annex Security

Annex Security

@secureannex

Discover what is hiding in your software extensions. Acquired by @SocketSecurity

Katılım Temmuz 2024
5 Takip Edilen282 Takipçiler
Annex Security retweetledi
@levelsio
@levelsio@levelsio·
Chrome extensions are so incredibly unsafe Malware criminals find popular ones, pay the owners of the extension lots of money, they add malware to the code and millions of people get infected Then they take your cookies, localStorage, anything they can access Which is why in locked down advanced security devices you can't even install Chrome extensions I mostly run uBlock Origin, but have some others that I'll just vibecode now to stay safe
@levelsio@levelsio

I think I'll just vibe code all my Chrome extensions with Claude Code to avoid having to use any and being dependent on someone getting bribed to add malware to their extension It's not a question IF it happens, just WHEN

English
100
97
1.5K
241.6K
Annex Security retweetledi
Wes Bos
Wes Bos@wesbos·
HEADS UP. Popular JSON formatter extension has started injecting geolocation tracking and donation UI into websites Reddit thread seems to think they are also swapping tracking IDs for affiliates (a-la honey) Uninstall and switch to another one
Wes Bos tweet mediaWes Bos tweet media
English
97
222
1.8K
324.4K
Annex Security retweetledi
Cole Tenold
Cole Tenold@coletenold·
@wesbos "Mom, how did we get so rich?" "Your dad created an open source chrome extension then rug pulled everyone and injected malicious code, sold everyone's data and received affiliate money for every purchase they made online"
Cole Tenold tweet media
English
0
2
36
1.4K
Annex Security retweetledi
tuckner
tuckner@tuckner·
A Chrome extension with 7,000 users and a Google Featured badge was recently sold, weaponized, and pushed a malicious update to that executed code through a hidden pixel. Here's how it worked 👇
tuckner tweet media
English
5
82
359
37.7K
Annex Security retweetledi
tuckner
tuckner@tuckner·
🧨 New CrashFix techniques found in browser extensions. "Pixel Shield" — a fully functional ad blocker (4.7 stars, 561 users) because it is a uBlock Origin clone. Hidden inside: a "Promise Bomb" that creates 10 MILLION unresolvable promises to crash your browser on command.
tuckner tweet media
English
1
18
94
13.1K
Annex Security retweetledi
tuckner
tuckner@tuckner·
This report contains 287 browser extensions tracking 37 million+ users. These were identified using methodology of sandboxing extensions, automatically browsing to URLs, and measuring a data ratio transferred. Real companies, fake services, well established, it's a mixed bag.
tuckner tweet media
English
2
36
182
50K
Annex Security retweetledi
tuckner
tuckner@tuckner·
The next supply chain worm has been seeded in Open VSX. A cloned Angular extension with 5000 downloads has been available for two weeks and was updated with malware 6 days ago. This multi stage attack uses etherhiding, gcal c2, rust implants, and more. annex.security/blog/worms-lur…
English
2
9
49
10.3K
Annex Security
Annex Security@secureannex·
RT @tuckner: Great work by the Obsidian Security team exfiltrating ChatGPT API keys to Telegram. I heard there's more to come! https://t.c…
English
0
1
0
138
Annex Security retweetledi
tuckner
tuckner@tuckner·
A browser extension with over a million users is poaching the prompts of leading AI chat tools. SimilarWeb loads obfuscated remote configuration to collect the prompts, responses and metadata of your conversations. Your private thoughts are analytics companies gain. secureannex.com/blog/prompt-po…
English
0
5
23
6K
Annex Security retweetledi
Trust Wallet
Trust Wallet@TrustWallet·
We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69. Please refer to the official Chrome Webstore link here: chrome.google.com/webstore/detai… Please note: Mobile-only users and all other browser extension versions are not impacted. We understand how concerning this is and our team is actively working on the issue. We’ll keep sharing updates as soon as possible.
English
810
883
3K
2.9M
Annex Security retweetledi
Florian Roth ⚡️
Florian Roth ⚡️@cyb3rops·
Glassworm's resurgence | by @secureannex @tuckner "we've identified and tracked an unprecedented 23 extensions which copy other popular extensions, update after publishing with malware, manipulate download counts, and use KNOWN attack signatures which have been in use for months" secureannex.com/blog/glassworm…
English
1
6
41
6.2K
Annex Security retweetledi
tuckner
tuckner@tuckner·
Glassworm returned in a big way during the holiday. We're tracking 23 code extensions across the VS Marketplace and Open VSX which copy popular extensions, evade filters, manipulate their download counts, and then update with sinister malware. secureannex.com/blog/glassworm…
English
0
8
19
2.3K
Annex Security retweetledi
tuckner
tuckner@tuckner·
The extension was approved, now what? Are you going back tomorrow to see if it changed? You know they auto update instantly right? Rolling out to Secure Annex - code change alerts. This takes comparison of the code from the previous version along with additional context to understand how the code in an extension is changing over time.
tuckner tweet media
English
0
4
9
2K
Annex Security retweetledi
tuckner
tuckner@tuckner·
A brand new unlisted extension with 100,000 users? 41 ratings? Must be really valuable. Nope - completely manipulated stats and it doesn't even contain real code. It exists only to collect your searches and earn Bing Rewards.
tuckner tweet mediatuckner tweet media
English
3
7
177
14.1K

Keşfet

@SocketSecurity @wesbos @tuckner @IceSolst @CRXaminer @billtoulas @elonmusk @BarackObama