SafeBrowse Chrome Extension Allegedly Hacked to Covertly Mine Cryptocurrency on Users' PCs

Advertisement
By Gadgets 360 Staff | Updated: 20 September 2017 18:42 IST
Highlights
  • The creators of SafeBrowse are calling this the work of a hacker
  • CPU usage can spike, causing PCs to slow down dramatically
  • Google seems to have removed SafeBrowse from the Chrome Web Store
SafeBrowse Chrome Extension Allegedly Hacked to Covertly Mine Cryptocurrency on Users' PCs

Users of the SafeBrowse extension for Chrome started noticing heavy CPU usage and PC slowdowns after updating to version 3.2.25. The extension claims to protect users by disabling ads that cover the entire screen and bypassing interstitial ads used by URL redirectors such as Adfly and Linkbucks. However, the latest update seems to include a feature that would qualify as malware on its own.

Security tracking site Bleepingcomputer discovered a JavaScript app embedded in the update that acts as a miner for the Monero cryptocurrency, harnessing the CPU power of PCs running the extension but earning money only for SafeBrowse's authors. Bleepingcomputer has published screenshots of the Windows Task Manger showing a spike in CPU usage at the time the extension was installed, as well as Chrome's own task manager showing 61.6 percent CPU usage caused by the SafeBrowse extension's thread. The PC used for the test immediately began behaving sluggishly, and applications started failing to respond. The site has also collected user reviews left in the Chrome Web Store complaining that the extension has made people's computers run slowly.

The extension is effectively acting as malware, turning PCs into zombies that are part of a giant worldwide botnet. While there might not be any malicious intent, users are unwittingly suffering while someone else makes money.

SafeBrowse now appears to have been taken down from the Chrome Web Store, as searches now lead to a 404 error page but Google still caches the original page, which shows that the extension had over 140,000 users as of September 19. The SafeBrowse team has responded to the controversy claiming that it has not released any updates for several months and this must be the work of a third-party hacker. Version 3.2.1 is the last updated listed on the official website. If true, this opens up the possibility of other Chrome extensions being used as vectors to infect millions of PCs worldwide despite Google's best efforts.

Advertisement

Users who have SafeBrowse installed can get rid of it by going to the Extensions page which is found under More Tools in the Chrome menu, or by right-clicking its icon next to the address bar and selecting Remove from Chrome.

Just a few days ago, The Pirate Bay was found to have done almost exactly the same thing, running a JavaScript currency miner on some pages. The site's operators claimed that it was an experiment with the intention of seeing whether ad revenue could be replaced. 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement

Related Stories

Popular Mobile Brands
  1. OnePlus 13s Price in India Leaked Ahead of Launch on June 5
  2. Vivo S30, Vivo S30 Pro Mini Launched With 50-Megapixel Selfie Camera
  3. Realme Neo 7 Turbo With 7,200mAh Battery Goes Official; All Specifications
  4. iPhone 17 Pro Max Design, Thicker Chassis Seen in Leaked Hands On Video
  1. MIT Study Reveals Why Roman Concrete Lasts Thousands of Years
  2. New Study Confirms Venus Is Still Geologically Active
  3. New Analysis Weakens Claims of Life on Distant Exoplanet K2-18b
  4. Viking Trade Routes More Expansive Than Thought, Finds Swedish Archaeologist After 5000 km Expedition
  5. China Launches AI-Powered Satellite Constellation to Build Space Supercomputer
  6. China and Russia Sign Deal to Build Lunar Nuclear Power Plant by 2036
  7. Starship Flight 8 Explosion Traced to ‘Flash’ in Rocket Engines, SpaceX Investigation Confirms
  8. 800-Year-Old Mummy Reveals Unusual Facial Tattoos Made from Rare Minerals
  9. SpaceX Cleared for Starship Flight 9 Launch After FAA Safety Review
  10. Vivo S30, Vivo S30 Pro Mini Launched With 6,500mAh Battery, 50-Megapixel Selfie Camera: Price, Specifications
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.