Security issue: Can't detect malware extension

[jinxx0]

If the malware extension is removed in Chrome, opera cannot detect it. On October 18, the extension "Nano Adblock & Nano Defender" collected all cookies from Instagram and hacked 100K accounts

[alexweissman]

This happened to me with "User Agent Switcher". I'm not exactly sure how this extension works, but it looks like it may have installed one of the new, infected versions of the extension without informing me or updating the version string:

Supposedly version 1.8.6.3 is not an infected version, but then when I look at the actual source code I can see that it opens up a socket to useragentswitch.com. This gives an attacker a full C&C access to my browser as described here: https://github.com/partridge-tech/chris-blog/blob/main/_content/2020/extensions-the-next-generation-of-malware/user-agent-switcher.md

[krystian3w]

Yes, ICE was updating extensions in the background so that users would not stay on the old version.