Microsoft Removes 119 Malicious Edge Extensions Hiding Malware in Images and Fonts

Microsoft has shut down a widespread malicious extension operation on the Edge Add-ons store, identifying 119 extensions linked to a single threat actor active since at least 2021. These extensions, disguised as legitimate tools like ad blockers and VPNs, hid their payloads within ordinary image and font files and remained dormant for days before stealing credentials and conducting ad fraud, potentially affecting up to 2.6 million users.

Context

Since at least 2021, a single threat actor has been operating by disguising harmful extensions as legitimate tools in the Edge Add-ons store. These extensions were designed to steal user credentials and engage in ad fraud, making them particularly deceptive. The operation's scale and the method of embedding malware in seemingly innocuous files raise concerns about the effectiveness of current security measures.

Why it matters

The removal of these malicious extensions is crucial for user security, as they pose significant risks to personal data and privacy. With up to 2.6 million users potentially affected, this incident highlights the vulnerabilities in popular web browsers. It underscores the need for vigilance in online security practices.

Implications

The incident may lead to increased scrutiny of browser extension marketplaces and their security protocols. Users who installed the affected extensions could face identity theft or financial loss, prompting a need for enhanced user education on safe browsing practices. Developers of legitimate extensions may also experience heightened regulations and oversight as a result of this breach.

What to watch

In the near term, users should monitor their accounts for any suspicious activity following the use of these extensions. Microsoft may implement additional security measures or updates to prevent similar incidents in the future. Observers should also watch for any reports of compromised accounts or increased ad fraud linked to this operation.