HACKERS USING FAKE ‘FLASH PLAYER’ GOOGLE CHROME EXTENSION TO STEAL CREDIT CARD DATA

SOURCE: RT

Cybersecurity researchers are warning unsuspecting internet users about a year-old Chrome extension which steals credit card data from infected users via web forms on visited websites.

The surreptitious extension is spread by means of JavaScript injection attacks i.e. “You don’t have Flash installed, use this Chrome extension instead,” or something to that effect. When unsuspecting or careless users click on these links, it triggers an automated redirect to the malicious extension.

The extension, available since February 2018, exploits the API (Application Programming Interface) functionality on websites by interrupting the digital handshake exchanged between user and website when a HTTP request is made, like clicking a link or submitting a form. It cannot be found through a regular search and instead is only proliferated through the sharing of a link.

The extension, created by fbsgang.info, proclaims itself to be a ‘Flash Reader’ and embeds a function in each and every website visited by the targeted user.

Whenever it detects credit number patterns specific to Visa, Mastercard, American Express, and Discovery card formats being inputted into a web form, it automatically relays them to the attacker via an AJAX request (essentially, a message that communicates directly with the server without interrupting the display or normal behavior of the active webpage).

Stolen information includes card issuer names, expiration dates, and CVV/CVC codes.

The good news is that the infection is not widespread, as only 400 installations have been detected, meaning its reach is limited.

Google was alerted by Cybersecurity firm ElevenPaths early last year, but the offending extension still existed in the Web Store in some form until recently. The server used by whoever is behind the malicious extension is currently down, but this may be a temporary measure while the group is under scrutiny or while they prepare another server to which they can redirect unsuspecting users.

It may also be a precursor for a much larger operation.

RT.com has contacted Google for comment.

SHARE THIS ARTICLE...

Views: 64

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

Doc Vega posted a blog post

They Won’t Stop

 The demonically driven left will not stop. Makes no difference how much violence they call for or…See More
14 hours ago
Doc Vega posted a blog post

What US Scientist unwittingly helped the Nazis devise the V-2 Missile?

  In the early 1920’s and leading up to World War II German technology outpaces the peace time…See More
Monday
tjdavis favorited Sandy's video
Monday
tjdavis posted a photo
Monday
Christopher Walker is now a member of 12160 Social Network
Sunday
tjdavis posted videos
Sunday
Burbia commented on tjdavis's photo
Thumbnail

Reflection

"Let's see if this goes past indictment."
Saturday
Doc Vega commented on Doc Vega's blog post Something Watches From Out there in the Wilderness
"cheeki kea That's very interesting history. So many things about history that go ignored or…"
Saturday
Burbia commented on Burbia's video
Saturday
Burbia posted a video

Programmed To Kill/Satanic Cover-Up Part 433 (The Charlie Kirk Conspiracy Show)

https://www.programmedtokill.net/projects---- DISCLAIMER! ----Copyright Disclaimer Under Section 107 of the Copyright Act 1976, allowance is made for "fair u...
Saturday
cheeki kea commented on cheeki kea's photo
Thumbnail

American werewolf- 2018

"Yip I've looked again and this is what the creature looks like, even has stripes just like…"
Saturday
cheeki kea commented on cheeki kea's photo
Thumbnail

American werewolf- 2018

"The mystery continues I guess. ( reminds me of something out of the under world )"
Saturday
cheeki kea posted a photo
Saturday
cheeki kea commented on Doc Vega's blog post Something Watches From Out there in the Wilderness
"Another fine story Doc V. I think it's Dogman the werewolf out there roaming around in high…"
Saturday
Doc Vega posted blog posts
Saturday
Doc Vega commented on Doc Vega's blog post What Four UFO Whistle Blowers All Suffered in Common?
"Less Prone Thanks for you comment Buddy! Dabbling in government kept secrets can cost you dearly. I…"
Saturday
Burbia posted a blog post

Sebastion Piñera and 5G

 Sebastion Piñera “The start of the bidding process for the 5G network. Let’s listen to the threats…See More
Saturday
tjdavis posted a photo
Oct 16
Doc Vega posted a blog post
Oct 16
Less Prone left a comment for Tammy
"Welcome"
Oct 16

© 2025   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted