Security researchers have identified a Chrome extension called Poper Blocker, advertised as an ad-blocker, that secretly collects and sends out a broad range of sensitive user information. The extension has been downloaded by millions of users, and despite researcher warnings, it remains listed in the official Chrome Web Store, giving it an appearance of legitimacy.
According to Dark Reading, the extension's behavior goes far beyond its stated purpose of blocking pop-ups. The report does not specify the full scope of the stolen data, but describes it as sensitive and voluminous. Users who installed the extension likely had no indication that their browsing activity and personal information were being siphoned off.
The case underscores a recurring problem: malicious or borderline extensions can pass through the Chrome Web Store's review process and reach a massive audience. Google's approval, in this instance, appears to have helped the spyware spread rather than protecting users from it.