All Chromium-Based Browsers at Risk: New Malware Strain Discovered

Malware has become a ubiquitous threat in today's digital landscape, and cybersecurity experts are constantly on the lookout for new strains that can compromise user data. Recently, researchers from Trustwave SpiderLabs have discovered a new malware strain called Rilide, which specifically targets users of Chromium-based browsers.

Rilide is disguised as a legitimate Google Drive extension, making it difficult to detect. The malicious software is capable of collecting system information, exfiltrating browsing history, taking screenshots, and injecting malicious scripts into the user's browser. This means that if you're using a Chromium-based browser such as Google Chrome, Microsoft Edge, Brave Browser, or Opera, you may be at risk.

One of the most worrying aspects of Rilide is its ability to compromise email accounts and cryptocurrency exchanges. The malware can replace email confirmations on the fly, tricking users into providing their authorization code for device authentication. This allows attackers to gain access to sensitive information, including financial data and personal identifiable information.

The extension also aims to compromise email accounts from popular providers such as Outlook, Yahoo, and Google, as well as cryptocurrency exchanges like Kraken, Bitget, Coinbase, and more. Rilide's crypto exchange scripts support an automatic withdrawal function, making it easy for attackers to drain user accounts.

Security researchers Pawel Knapczyk and Wojciech Cieslak have been investigating the malware, and their findings suggest that users of Chromium-based browsers should exercise extreme caution when installing extensions or clicking on suspicious links. To stay safe, users are advised to keep their browser and operating system up-to-date, use strong antivirus software, and be wary of unsolicited emails or messages.

The discovery of Rilide is a stark reminder of the importance of staying vigilant in the face of ever-evolving malware threats. It's crucial that users take steps to protect themselves from these types of attacks, and it's essential for browser manufacturers and cybersecurity experts to continue working together to stay ahead of malicious actors.

All chromium based browsers