threat-intel
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
High
Summary
A popular Google Chrome ad blocker extension, Adblock for YouTube, with over 10 million installs, has been found to contain a dormant script injection capability. Researchers discovered the extension’s architecture allows for arbitrary JavaScript execution, potentially enabling data theft and unauthorized access to sensitive browser sessions. While no malicious activity has been detected, the presence of this capability, combined with past issues and related extensions, raises significant privacy and security risks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data