<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	
	xmlns:georss="http://www.georss.org/georss"
	xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#"
	>

<channel>
	<title>fake ad block software &#8211; Greg Laden&#039;s Blog</title>
	<atom:link href="https://gregladen.com/blog/tag/fake-ad-block-software/feed/" rel="self" type="application/rss+xml" />
	<link>https://gregladen.com/blog</link>
	<description></description>
	<lastBuildDate>Fri, 20 Apr 2018 14:51:27 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.4.8</generator>

<image>
	<url>https://i0.wp.com/gregladen.com/blog/wp-content/uploads/2017/10/Greg_Ladens_Blog_Favicon_black_GLb.png?fit=32%2C32&#038;ssl=1</url>
	<title>fake ad block software &#8211; Greg Laden&#039;s Blog</title>
	<link>https://gregladen.com/blog</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">77525483</site>	<item>
		<title>Do you have a fake ad blocker installed in Chrome?</title>
		<link>https://gregladen.com/blog/2018/04/20/do-you-have-a-fake-ad-blocker-installed-in-chrome/</link>
					<comments>https://gregladen.com/blog/2018/04/20/do-you-have-a-fake-ad-blocker-installed-in-chrome/#comments</comments>
		
		<dc:creator><![CDATA[Greg Laden]]></dc:creator>
		<pubDate>Fri, 20 Apr 2018 14:51:10 +0000</pubDate>
				<category><![CDATA[Technology]]></category>
		<category><![CDATA[ad blocker]]></category>
		<category><![CDATA[fake ad block software]]></category>
		<category><![CDATA[fake software]]></category>
		<category><![CDATA[virus]]></category>
		<guid isPermaLink="false">https://gregladen.com/blog/?p=29631</guid>

					<description><![CDATA[These fake ad blockers hid malicious code. Ad Guard Research reported this: What if I told you that thanks to poor Chrome&#8217;s WebStore moderation the situation is much worse, and in reality over 20,000,000 users are affected and tricked into installing fake malicious ad blockers?&#8230; Now back to the normal language. Here is a list &#8230; <a href="https://gregladen.com/blog/2018/04/20/do-you-have-a-fake-ad-blocker-installed-in-chrome/" class="more-link">Continue reading <span class="screen-reader-text">Do you have a fake ad blocker installed in Chrome?</span> <span class="meta-nav">&#8594;</span></a>]]></description>
										<content:encoded><![CDATA[<p>These fake ad blockers hid malicious code.  <span id="more-29631"></span></p>
<p><a href="https://blog.adguard.com/en/over-20-000-000-of-chrome-users-are-victims-of-fake-ad-blockers/">Ad Guard Research</a> reported this:</p>
<blockquote><p>What if I told you that thanks to poor Chrome&#8217;s WebStore moderation the situation is much worse, and in reality over 20,000,000 users are affected and tricked into installing fake malicious ad blockers?&#8230;</p>
<p>Now back to the normal language. Here is a list of what this fake ad blocker does.</p>
<p>It hides malicious code inside a well-known javascript library (jQuery).<br />
This code sends back to their server information about some of the websites you visit.<br />
It receives commands from the command center remote server. In order to avoid detection, these commands are hidden inside a harmless-looking image.<br />
These commands are scripts which are then executed in the privileged context (extension&#8217;s &#8220;background page&#8221;) and can change your browser behavior in any way.</p>
</blockquote>
<p>Apparently there are several such ad blockers.</p>
<p>Google has removed the ad blockers from its google store.</p>
<p>From <a href="https://www.digitaltrends.com/computing/20-million-chrome-users-downloaded-fake-ad-blockers/?utm_source=sendgrid&#038;utm_medium=email&#038;utm_campaign=daily-brief">Digital Trends</a>:</p>
<blockquote><p>Google removed a number of fake ad blockers from its Chrome store after an AdGuard researcher discovered that these extensions concealed malicious scripts. The code hidden within these fake ad blocking extensions was used to collect information about a user’s browsing session and to change the browser’s behavior.</p>
<p>Some of these extensions were popular, with one fake ad blocker garnering as many as 10 million downloads. Even the least popular extension, Webutation, had 30,000 downloads.</p>
<p>These malicious ad-blocking extensions merely copied the legitimate ad blocking code from real ad blockers and added its own harmful one.</p>
<p>&#8230;</p>
<p>The malicious code sends the data it collects, including your browsing information, to a remote server. The server then sends a command to an extension that is concealed inside an innocent image, and the commands are executed as scripts to change the way your browser behaves.</p>
<p>To protect yourself, AdGuard recommends that you only download browser extensions from trusted authors and companies. If you don’t know the author, Meshkov recommends skipping the extension. Even if the extension comes from a trusted author, the software could be sold to another party in the future, which could then change the intended use or behavior of the extension.</p></blockquote>
<p>Good luck.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://gregladen.com/blog/2018/04/20/do-you-have-a-fake-ad-blocker-installed-in-chrome/feed/</wfw:commentRss>
			<slash:comments>11</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">29631</post-id>	</item>
	</channel>
</rss>
