Chrome Mega Extension Hacked to Steal User Data

Users are being notified by Google Chrome, to immediately delete Chrome’s Mega Extension following a recent discovery of hacking attempts on its platform. The hacking activity included malicious codes being added to chrome extension’s manifest.json and content.js. The malicious codes allow the program to steal users sensitive data such as  password information on Google, Amazon, cryptocurrency and Microsoft accounts.

Mega Chrome extension users are only affected if they accepted an additional permission or installed version 3.39.4. Four hours after the data-breach, the  Chrome Mega extension was updated to its new version 3.39.5.