Tech Hacked Chrome extensions put 2.6 million users at risk of data leak These extensions can steal your browsing data and account credentials Published January 6, 2025 9:00am EST Your web browser is an ecosystem of its own. It stores your passwords, search history, financial details like credit card numbers, addresses and more. Just like how malicious apps and services can compromise data on your phone or PC, malicious extensions can expose the data stored in your browser.There are a ton of extensions out there that do more harm than good. In fact, security researchers have just found a dangerous new campaign that is going after browser extensions. So far, around 36 extensions have been compromised, putting over 2.6 million Chrome users at risk of having their browsing data and account credentials exposed.Enter the giveaway by signing up for myfree newsletter. A person using a Chrome browser extension (Kurt "CyberGuy" Knutsson)How hackers are targeting browser extensionsHackers are exploiting browser extensions as a gateway to steal sensitive user data through a variety of methods. These compromised extensions are exposing over 2.6 million users to data exposure and credential theft, as reported byThe Hacker News.One common attack involves phishing campaigns targeting the publishers of legitimate extensions on platforms like the Chrome Web Store. In these campaigns, attackers trick developers into granting permissions to malicious applications, which then insert harmful code into popular extensions. This code can steal cookies, access tokens and other user data.The first company to shed light on the campaign was cybersecurity firm Cyberhaven, one of whose employees were targeted by a phishing attack on December 24, allowing the threat actors to publish a malicious version of the extension.Once these malicious extensions are published and pass the Chrome Web Store's security review, they are made available to millions of users, putting them at risk of data theft. Attackers can use these extensions to exfiltrate browsing data, monitor user activity and even bypass security measures such as two-factor authentication.In some cases, developers themselves may unknowingly include data-gathering code as part of a monetization software development kit, which stealthily exfiltrates detailed browsing data. This makes it difficult to determine whether a compromise is the result of a hacking campaign or an intentional inclusion by the developer. Image of a Chrome browser on a cellphone (Kurt "CyberGuy" Knutsson)Remove these extensions from your web browserThe browser extension security platformSecure Annex has launched its own investigation into this hacking campaign. So far, it has uncovered over twenty additional compromised extensions, which are listed below. If you have any of the compromised extensions listed in Secure Annex's investigation installed on your browser, its essential to remove them immediately to protect your data.AI Assistant - ChatGPT and Gemini for ChromeBard AI Chat ExtensionGPT 4 Summary with OpenAISearch Copilot AI Assistant for ChromeTinaMInd AI AssistantWayin AIVPNCityInternxt VPNVindoz Flex Video RecorderVidHelper Video DownloaderBookmark Favicon ChangerCastorusUvoiceReader ModeParrot TalksPrimusTackker - online keylogger toolAI Shop BuddySort by OldestRewards Search AutomatorChatGPT Assistant - Smart SearchKeyboard History RecorderEmail HunterVisual Effects for Google MeetEarny - Up to 20% Cash BackCyberhaven security extension V3GraphQL Network InspectorVidnoz Flex - Video recorder & Video shareYesCaptcha assistantProxy SwitchyOmega (V3)ChatGPT AppWeb MirrorHi AIKeeping these extensions installed is a serious risk since hackers can still access your data even if the malicious version has been taken down from the Chrome Web Store. Secure Annex is still investigating and has shared apublic Google Sheet with details about the malicious extensions it has found so far, like whether theyve been updated or removed. Theyre also adding new extensions to the list as they discover them.How to remove an extension from Google ChromeIf you have installed one of the above-mentioned extensions on your browser, remove it as soon as possible. To remove an extension from Google Chrome, follow these steps:Open Chrome and click the icon that looks like a piece of a puzzle. You'll find it in the top-right corner of the browser.You can see all the active extensions now. Click thethree dots icon next to the extension you want to remove and selectRemove from Chrome.ClickRemove to confirm Steps to remove an extension from Google Chrome (Kurt "CyberGuy" Knutsson)7 ways to stay safe from malicious software1) Verify emails and links before clicking:Many attacks begin withphishing emails that impersonate trusted entities like Google Chrome Web Store Developer Support. These emails often create a false sense of urgency, urging you to click on malicious links. Always verify the senders email address and avoid clicking on links without double-checking their authenticity. When in doubt, go directly to the official website rather than using a provided link.2) Use strong antivirus software:Having strong antivirus software is an essential line of defense against malicious software. These tools can detect and block malicious code, even if it has been embedded in browser extensions.Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.3) Limit extension permissions:Be cautious about the permissions you grant to browser extensions. Many require access to sensitive data like browsing history, cookies or account information, but not all requests are necessary. Review what each extension asks for and deny permissions that seem excessive. If possible, opt for extensions with limited access to ensure your data remains protected.4) Limit the number of extensions: Only install extensions that are genuinely needed and regularly review and uninstall those no longer in use.5) Keep your browser updated: Always update your browser to the latest version. Updates often include critical security patches that protect against vulnerabilities exploited by malicious software. Using an outdated browser increases the risk of being targeted by attacks that could have been prevented with a simple update. Enable automatic updates to ensure youre always protected. If you are unsure how to update your browser, check out mydetailed guide for Google Chrome.6) Regularly audit your extensions: Conduct periodic reviews of installed extensions and remove any that are unnecessary or pose potential security risks.7) Report suspicious extensions: If you encounter a suspicious extension, report it to the official browser extension marketplace.Kurts key takeawayHackers are getting smarter, and browser extensions have become a new favorite target for stealing sensitive data. The discovery of over 35 compromised Chrome extensions, putting 2.6 million users at risk, is a wake-up call for everyone. Removing suspicious extensions is an essential step to protect your data. This also puts Googles Chrome Web Store review process under scrutiny, proving that even trusted platforms can be exploited.How often do you review and remove unused or suspicious browser extensions? Let us know by writing us atCyberguy.com/Contact.For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you'd like us to cover.Follow Kurt on his social channels:Answers to the most asked CyberGuy questions:New from Kurt:Copyright 2024 CyberGuy.com.All rights reserved. Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on "FOX & Friends." Got a tech question? Get Kurts free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com. Related Topics

The Intel Core Ultra Series 2 processors are rolling out later in the year, introducing improved performance and better protection against malware.

Ring is teaming up with a leading fire safety product maker to launch a new line of smart smoke and combination alarms.

Control your Hubspace devices with a new remote switch, and cool your home with a Vissani smart air conditioner. Home Depot announces the tech at CES 2025.

As we head into 2025, AI will assist both attackers and defenders in ways previously unimagined, reshaping the cybersecurity industry as we know it.

Striking a balance between automation and human supervision, along with continuous monitoring and regular audits, is key.

LG 3-in-1 projector, lamp and Bluetooth speakerPrakhar KhannaAhead of the official kickoff at CES 2025, LG unveiled a bunch of new devices, including a 3-in-1 projector. The latter is a new lifestyle device that also doubles as a moody lamp and Bluetooth speaker. Its a nice idea to make the projector-on-a-stand-design more useful while its sitting in your living room turned off. LG also showcased its smallest-ever 4K Ultra Short Throw projector, the CineBeam S.Named PF600U, the versatile 3-in-1 lifestyle LG projector is designed to tailor any rooms ambiance to your preference. You can have it as a private theater, Bluetooth speaker for party nights as well as a floor lamp to give your room a distinct look.LG is solving the standard-throw projector issue where its situated somewhere in the middle of the living room and unsightly gets in the way. I saw it at CES Unveiled, and while the projection wasnt turned on, the lamp light seemed bright and perfect for moody sessions.As per LG, the 3-in-1 lifestyle projector design is inspired by a floor lamp and the stand-pole design ensures intuitive usability and effortless integration into any space,The product can project Full HD (1,920 x 1,080) resolution and supports 300 ANSI lumens of brightness from its LED light source. It runs LG webOS, supports HDR, HLG and features a stereo speaker setup with passive radiators to offer rich and immersive sound.MORE FOR YOULG 3-in-1 projector, lamp and Bluetooth speakerPrakhar KhannaThe LG PF600U has a 1.2 throw ratio and a contrast ratio of 150,000:1, while the screen size can go from 30 inches to 120 inches. At 16 pounds (7.5kg) its pretty light and looks elegant. These arent flagship-level specs but you can expect decent picture quality. The product can project Full HD (1,920 x 1,080) resolution and supports 300 ANSI lumens of brightness from its LED light source. It runs LG webOS, supports HDR, HLG and features a stereo speaker setup with passive radiators to offer rich and immersive sound.The LG PF600U has a 1.2 throw ratio and a contrast ratio of 150,000:1, while the screen size can go from 30 inches to 120 inches. At 16 pounds (7.5kg) its pretty light and looks elegant. These arent flagship-level specs but you can expect decent picture quality.I couldnt get it to demo as a speaker but the 110-degree tilting, which features automatic screen adjustment for the projector, also doubles as an angle lamp to throw light at the place you want.The lamp light is at the bottom of the projector body, while the speaker is on the upward side. In theory, you can rotate for the light to point towards the wall, so it creates the mood, while youre playing songs over Bluetooth firing right at you. As for the LED lamp, it offers nine colors and five brightness levels.The press release says that both 3-in-1 lifestyle project and their smallest-ever UST projector are new concept models. There is no word on price and availability yet but I hope the PF600U transforms into a real product soon because Id love to have a projector thats also useful when not projecting.

The big picture: A debate surrounding Northeastern's computer science curriculum highlights the ongoing challenges in higher education about how to best prepare students for rapidly evolving technical fields. While Python is currently popular in the industry, the choice of programming language for teaching should be based on pedagogical merit rather than current trends, writes one student. In a recent op-ed for The Huntington News, Derek Kaplan, a fourth-year Computer Science student at Northeastern University, presented a compelling argument about the future of computer science education at his institution. The piece comes in response to Northeastern's announcement of a complete overhaul of its computer science curriculum.Kaplan makes the case that the rapidly evolving nature of the tech industry requires a focus on timeless principles rather than current trends and that an effective curriculum should emphasize fundamental principles that are widely applicable, enabling students to easily adapt to new technologies in their future careers. "A curriculum focused on current industry trends risks becoming obsolete before students even graduate," he noted.Northeastern's current curriculum, particularly the "Fundies" courses, focuses on systematic program design and problem-solving skills. These courses teach a design recipe that provides a consistent formula for tackling unfamiliar problems, training students to reason about code "rather than to mindlessly write it," he said.The "point of Fundies is to teach program design skills that can be applied using any programming language A student who does well in Fundies will have no difficulty applying the same skills to Python or any other language."However, the proposed changes to the curriculum have raised concerns. The plan is to phase out core courses like Fundies 1, Fundies 2, and Object-Oriented Design in favor of new courses primarily teaching Python, which Kaplan sees as potentially misguided.Racket, the language currently used in introductory courses, was chosen for its teaching-oriented features, which Python lacks. Kaplan also views as problematic the decision to allow students to place out of new courses with AP Computer Science credit, as AP courses do not teach the same systematic design skills as Northeastern's current introductory courses.These changes suggest a shift away from systematic program design as a central aspect of the curriculum, which could leave students ill-prepared for advanced coursework and future careers. The Object-Oriented Design course, while challenging for many students, teaches essential skills such as working with code written by others and managing large software projects. // Related StoriesKaplan also questions the motivations behind the curriculum change, suggesting that it may be driven by a desire to make the core curriculum easier and reduce the number of students withdrawing from certain courses."I know one professor who has been telling students that the college wants to reduce the number of students who withdraw from Fundies 2 and Object-Oriented Design. While this is an understandable sentiment, it would be a mistake to remove the most important parts of the curriculum to do so."Finally, he notes that experienced teaching assistants could provide valuable input into the curriculum revision process. Their unique perspective, having both taken the courses and helped other students succeed, could help ensure that core principles are not compromised while allowing for beneficial changes."As a former teaching assistant, or TA, for Object-Oriented Design, I have seen many students struggle through the class. But I have also seen those same students become better programmers because of what they learn in that class."

Highly anticipated: What has felt like the longest-ever wait in tech history is almost over. In around 12 hours, Nvidia will finally unveil the GeForce RTX 5000 series desktop graphics cards during its CES keynote. Leaks for consumer-grade Blackwell GPUs have been coming thick and fast over the last few days, but we'll soon have the official details, including the all-important prices. You can watch the entire event right here, starting at 6:30 pm PT / 9:30 pm EST / 3:30 am CET. A most recent leak claimed to show a screenshot from a European retailer listing the RTX 5080. It was priced at 1,699 Euros, around $1,749, though that included 20% VAT, so the actual price would be a still very high $1,399. The listing also appeared to confirm the use of GDDR7 memory and the introduction of Nvidia's next-generation of upscaling tech, DLSS 4.Keeping with tradition, Nvidia still hasn't officially confirmed that the RTX 5000 series is on the way, but there have been plenty of hints. The fact the gaming festival it's currently running is called GeForce LAN 50 and the company is talking about looking "to the future" on social media pretty much confirms what's coming. Moreover, Jensen Huang is delivering the keynote, marking the first time that the CEO has appeared at the event since 2019, suggesting something big is in store.It's expected that the RTX 5090 and RTX 5080 will be unveiled at CES, while the RTX 5070, RTX 5070 Ti, and China-only RTX 5090D will likely be on show. In the last few hours, a marketing image of the Inno3D RTX 5090 iChill X3 appeared online. It features a massive 32GB of GDDR7 and a 3.5-slot cooler.The RTX 5090 is expected to feature 21,760 CUDA cores, nearly 1.8TB/s of memory bandwidth, and a TDP of 575 watts, 125W more than the RTX 4090. It's also the only card in the RTX 5000 line to use the GB202 GPU. // Related StoriesThe RTX 5080 is believed to be the first card in the RTX 5000 series to launch, on January 21. It's expected to come with 16GB of GDDR7, half that of the RTX 5090, and a 256-bit memory bus.Remember to come back here at 6:30 pm PT / 9.30 pm EST / 2:30 am BST to watch the whole event.

NetflixTable of ContentsTable of ContentsThe first wishA grain of truthA time of contemptHBOs Game of Thrones was a game-changing phenomenonthat dominated the 2010s and single-handedly revived the fantasy genre on the small screen; whatLord of the Rings did for fantasy movies,Game of Thrones did for fantasy TV. It took HBOs competition a while, but by the second half of the 2010s, most streamers had a major fantasy show in the works, ready to claimThrones place as it neared its infamous ending in 2019. However, out of all these shows, perhaps none was more successful or infamous as NetflixsThe Witcher.Starring the reigning king of the nerds and Mr. Franchise himself, Henry Cavill, The Witcher was supposed to be Netflixs main fantasy vehicle, and for a while, it was. Season 1 premiered to huge numbers and generated a ton of conversation; reviews were mixed, but the show seemed like it was everything Netflix wanted to be until it wasnt. Five years and three seasons later, its clear The Witcher not only failed to live up to its lofty expectations but mightve actually hurt Netflixs reputation ever so slightly. On its fifth anniversary, we look back atThe Witchers complicated history and discuss how Netflix mightve put far too much pressure on an IP that was never going to explode in the way it wanted it to.Recommended VideosNetflixIn 2017, Netflix announced it would develop a series based on Andrzej Sapkowskis long-running dark fantasy seriesThe Witcher. Nearly every major trade that reported it made the connection with HBOs pride and glory, not-so-subtly asking, Has Netflix found its Game of Thrones? From the start,The Witcher was meant to act as Netflixs big fantasy IP; on paper, it made perfect sense. The series included multiple books and short stories. More importantly, it had a built-in fanbase from two distinct sources: the books, of course, and the highly successful and acclaimed video game adaptations courtesy of CD Projekt Red, whose 2015 effort The Witcher 3: The Wild Hunt soldover 50 million copies as of 2023 and won Game of the Year at the 2015 Game Awards.CD Projekt RedIn September 2018, Henry Cavill was announced to star in the series. At that point, Cavill was at a great place career-wise following the critical and commercial success of Mission: Impossible Fallout, arguably his best performance to date. Moreover, he was ostensibly still Superman, and his name carried a lot of weight in the geek community. Shortly after, newcomers Anya Chalotra and Freya Allan were cast in the key roles of Yennefer of Vengerberg and Cirilla of Cintra, and the show started filming for a later 2019 premiere.Geralt's Butcher of Blaviken Fight in 4K | The Witcher Season 1The Witcher centers on three distinct storylines. Geralt of Rivia (Cavill) is the titular character, a monster hunter with enhanced abilities and magic who traverses The Continent, killing dangerous beasts and charging the reward. Yennefer of Vengerberg (Chalotra) is a powerful sorceress and the unofficial adviser of the Kingdom of Aedirn who sacrificed her fertility to become beautiful. Lastly, Cirilla (Allan) is the young princess of Cintra who escapes into the wilderness following an attack on her homeland and discovers incredible power within. The first season keeps their stories mostly separate, building until their eventual meeting to form the found family thats so popular in both the books and the show.NetflixBefore season 1 had even premiered, Netflix renewed The Witcher for a second season. Cavill, who actively campaigned for the role of Geralt, stated hed happily commit to the shows seven-season arc as long as (they) can keep telling great stories that honor Sapkowskis work. In hindsight, it very much seems that, withThe Witcher, it was always about what was coming rather than what actually was at the moment. The showrunner, Lauren Schmidt Hissrich, often spoke about the long-term plan, while Cavill kept stressing Geralts future journey. Yet, the present never seemed to be discussed in fact, for this show, the present always seemed to already be the past.RelatedNetflixReception for season 1 of The Witcher was mixed. The performances, particularly Cavills and Chalotras, were praised, as were the fight sequences, visual effects, and overall production values. However, the narrative and its needlessly complicated structure attracted considerable criticism, and for good reason. Season 1 of The WitcherHowever, the novelty, plus Cavills presence and an annoyingly catchy earworm that took over the internet in late 2019, turned The Witcher into an outright sensation. It accumulated 76 million views in its first month on the streamer and pleased most hardcore fans while still attracting a new crowd with its premise, star power, and the promise of another fantasy epic about politics, magic, and sex.Netflix -The Witcher Epic Scene - Jaskier Song -Toss a coin to your witcher -The only issue was thatThe Witcher didnt have much of those three. Yes, there was gratuitous nudity in season 1 and the occasional talk about The Continents larger political situation, but for the most part, The Witcher followed a monster-of-the-week formula while keeping its secrets incredibly vague and unclear. Still, there seemed to be enough here to support a successful show, and it was full steam ahead with season 2, which arrived two years later in December 2021. For starters, thats too much time for a show that was probably binged in 24 hours; that issue, of course, isnt exclusive to The Witcher, but it played a big role in its slow decline.Season 2 was the point of no return forThe Witcher. The series introduced new plots that were met with mixed-to-negative reception from the core audience, who lamented how much deviation from the source material was happening. Crucial choices, like Eskels death and the creation of a new villain, Voleth Meir, were particularly divisive and pretty much split the hardcore audience into two; whereas casual viewers couldnt care less, the built-in fanbase that Netflix depended on did, and they didnot like it.What followed was a prolonged and quite ugly situation where both sides fired shots at each other. To make matters worse, in late 2022, after a year of constant attacks following season 2s premiere, Beau DeMayo, a former writer for the show, claimed that no one on the writing team liked the source material and, in fact, openly mocked it.Season 2 First Look Clip: Geralt & Ciri | The WitcherSuch claims, coupled with Henry Cavills exit from the show in October 2022, pretty much destroyed any goodwill The Witcher had left. Those who already hated it were further empowered, while those on the fence turned their backs on the show. And its a shame because season 3 might just be the best of The Witcher, featuring the most assured and put-together narrative and building toward an actual cohesive story with a clear goal. Alas, no one really cared; by the time season 3 came along, interest in The Witcher had diminished to the point of disappearing, not because of the controversies and not even because of Cavills exit, but rather because it was clear it was not Game of Thrones.Yes, the hard truth is that, as a show,The Witcher is not as great as everyone wanted it to be. Dont get me wrong, its a fine series with good to great performances (Chalotra is really a gift and a revelation, and Cavill delivers some of his finest work, especially in season 3), strong visual effects, and an interesting enough storyline. However, it never strives for greatness; theres very little ambition in its storytelling, which is more Star Trek than Game of Thrones. There are no layers to its world-building, and its narrative structure oscillates between decent and outright clumsy. Game of Thrones succeeded because it embraced fantasy but grounded it in gritty themes that made it addictive politics, betrayal, shocking violence, sex, and everything in between.Geralt - The WitcherThe Witcher has none of that, largely because it doesnt seem interested in doing it. WhereasThrones was expansive,The Witcher seems limited and short-sighted. Whether its a good or bad adaptation of Sapkowskis work is up for debate, but the absolute truth is that, as a show,The Witcheris just fine. And for a project with such high hopes behind it, fine just wont do.NetflixThe Witcher ended its third season with little fanfare. Its unclear at what point in production Cavill negotiated his exit, but his goodbye from the show was only OK bittersweet, for sure, but far from memorable. In his place, Liam Hemsworth will take over, which pretty much says everything about the shows current state that it couldnt secure anyone better than the third and least interesting lead from The Hunger Games. Season 4 will arrive at some point next year, with a fifth and final season already announced. Thus,The Witcher will limp its way to an ending in 2027 not as Netflixs crowning fantasy jewel but as another of the streamers high-profile shows that ultimately amounted to nothing.What is the shows legacy? Well, Cavill will be fine. His reputation did take a bit of a hit, but thats not just because of the show; a string of high-profile flops certainly didnt help. Still, Cavill is largely in a good place, with the Warhammer 40K movie in the works, plus the Voltron and Highlander movies set to film next year and another Guy Ritchie action vehicle. More than any other actor, Cavill seems content with being a franchise player, so hes where he wants to be.NetflixFreya Allan has also made moves outside the series, with 2024 being something of a breakout year for her, thanks to Kingdom of the Planet of the Apes, which might very well get a sequel soon. As for Chalotra, she recently made her debut as Circe in the DCUsCreature Commandos. Since there will apparently be synergy between animated and live-action projects in the DCU, Chalotras Circe might make her live-action debut in a future movie.Netflix, of course, will be fine, too. It will keep trying to launch a big fantasy IP, no matter how many missteps it has whether it actually succeeds is a different matter. But what aboutThe Witcher itself? Well, the IP will probably not return to live action for years following the end of the Netflix show, if ever. In the gaming world, its already preparing for a fourth game,The Witcher IV, which will follow Ciri as the protagonist. Whether the shows divisive reception will impact its gaming counterpart remains to be seen. The truth is, the IP is now caught in the middle of the ongoing culture wars, and only time will tell if it makes it out intact.Top 10 Best Fight Scenes In The Witcher TV SeriesFive years after its release, NetflixsThe Witcher stands as an example of a show that existed in the shadow of another and was unwittingly set up for disappointment. And while it isnt an outright failure under any metric, it cannot be called a success, either.The WitcherThe Witcher is available to stream on Netflix.Editors Recommendations