Hacked MEGA Chrome Extension Used to Steal Monero, Ether, and More

[jings009]

On Tuesday, a user on Reddit alerted readers that the Chrome extension for the popular file-sharing platform MEGA had been hacked and used to steal users private keys, usernames, and passwords. The attack was later confirmed by both MEGA and Monero.

At roughly 11:30 am EST on Tuesday, Reddit user u/gattacus posted an alert in the /r/Monero subreddit cautioning readers not to use v.3.39.4 of the MEGA Chrome extension because it appeared to have been hacked.

u/gattacus explained:

There was an update to the extension and Chrome asked for new permission (read data on all websites). That made me suspicious and I checked the extension code locally (which is mostly javascript anyways). MEGA also has the source code of the extension on github […] There was no commit recently. To me it looks either their Google Webstore account was hacked or someone inside MEGA did this. pure speculation though.

Para sa karagdagan: https://www.livebitcoinnews.com/hacked-mega-chrome-extension-used-to-steal-monero-ether-and-more/