06 September 2018

MEGA.nz Chrome extension caught stealing passwords, cryptocurrency private keys


The official Chrome extension for the MEGA.nz file sharing service has been compromised with malicious code that steals usernames and passwords, but also private keys for cryptocurrency accounts, ZDNet has learned.

The malicious behavior was found in the source code of the MEGA.nz Chrome extension version 3.39.4, released as an update earlier today.

Google engineers have already intervened and removed the extension from the official Chrome Web Store, and also disabled the extension for existing users.

MEGA.nz sound familiar? Where have I heard that name before? 
Remember this guy: Kim Dotcom? Yup, it's his outfit...



No comments:

Post a Comment