Extension

Rock.87

As all the extensions can read and change the data on the in the browser, then how to become secure? is there any way ? Does Bitdefender protect from such kind of privacy risk :

i need urdu extension cuz the net fonts are horrible, google fonts need hell of tech knowledge to be applied, any fix ?

Flexx

To add here, I gather various malicious and adware Chrome extensions from different sources over time and send them to the Bitdefender malware research team for analysis. If they exhibit malicious or adware behavior, Bitdefender creates detections against them.

Also, make sure that any extensions you install on your Chrome browser come from reputable sources and are verified. Look for a checkmark next to the extension to confirm its authenticity, as shown in the image below.

Additionally, the extension you shared appears to be safe, as it is not detected by any antimalware on the VirusTotal link shared below.

https://www.virustotal.com/gui/file/ee503ea3c23b74313b093fed475b92cadf07f0f9acc04fa6fb125474095ee9e1?nocache=1

Regards

Flexx

https://community.bitdefender.com/en/discussion/comment/346282#Comment_346282

I have provided you with the submission details via private message.

Regards

Alexandru_BD

Yes, I think most browser extensions can read and change the data on the websites you visit, especially if they require permissions to access your browsing data. This level of access is often necessary for them to function, but it can raise security and privacy concerns. I think the rule of thumb is simple: only install extensions you truly need. The fewer extensions you have, the fewer potential vulnerabilities. 😉

Also, a good practice is to stick to well-known extensions from reputable developers. Look for extensions with a high number of downloads and positive reviews, especially those recommended by trusted sources. The next recomendation is very important and I can't stress this enough: before installing any extension, carefully read the permissions requested by the extension. If an extension requests more permissions than you think it should need, it may be best to avoid it. Furthermore, some developers make their code publicly available, so if you or someone you trust has the skills to review the code, open-source extensions can be a good choice for security.

This goes without saying, always keep your extensions updated, as updates often include security patches. Also, I think another good security practice is to turn off extensions you don't require on sensitive websites, such as banking or financial sites.
I think the key takeaway here is to only install trusted extensions that enhance your privacy, like ad blockers, anti-tracking tools, and those that manage permissions, to minimize the data other extensions can access. Some browsers, like Firefox and Brave, are privacy-focused and offer enhanced security settings for extensions.

These would be my personal recommendations. Maybe other members can jump in on the thread to share their advice and insights regarding browser extensions, and other good security practices revolving around them.

Regards,

Alex

Rock.87

Hi !
thx for the detailed answer, would you plz inform that how can i do the same ''

I gather various malicious and adware Chrome extensions from different sources over time and send them to the Bitdefender malware research team for analysis ''

& how can i submit something here :

'' https://www.virustotal.com/gui/file/ee503ea3c23b74313b093fed475b92cadf07f0f9acc04fa6fb125474095ee9e1?nocache=1''

Flexx

https://community.bitdefender.com/en/discussion/comment/346217#Comment_346217

Well, it’s a bit of a complicated and lengthy process. You’ll need to visit the blogs of various antimalware vendors, search for articles related to malicious Chrome extensions, and collect the hashes or IDs of those Chrome extensions. Then, find a website via Google search where you can download Chrome extensions, input the extension ID, and download the required .crx extension file. Next, upload the .crx file to VirusTotal to have it scanned by various antimalware vendors. If anything is undetected, you can send the hashes to antimalware researchers for further analysis. All in all, it’s not that easy.

For the VirusTotal link you shared, I’ve downloaded the extension, zipped it, and sent you a private message. You know how to proceed from here for submitting it to the malware research team.

Regards

Rock.87

https://community.bitdefender.com/en/discussion/comment/346228#Comment_346228

do i need to download that file ? are the details in that file ? i could not get you this time.