Google has banned obfuscated code for Chrome Web Store extensions to reduce policy violations in a move likely to affect cryptojackers.
Google’s new restrictions on Chrome Web Store extensions introduced Monday, October 1, are likely to affect cryptojackers.
In a blog post, Google confirmed that as of now, Chrome extensions submitted to the Web Store would not be allowed if they contained “obfuscated” code.
Aside from the security implications, obfuscated code, which the post describes as “mainly used to conceal code functionality,” “adds a great deal of complexity” to the process of reviewing extensions for approval.
Cryptojackers rely on the clandestine insertion of malicious malware into scripts, allowing them to mine for cryptocurrencies without those being hacked noticing. In May, cybersecurity firm Radware reported on several crypto mining malware Chrome extensions that had “inject[ed] a short, obfuscated malicious script” in order to “bypass Google’s extension validation checks.”
“Existing extensions with obfuscated code can continue to submit updates over the next 90 days, but will be removed from the Chrome Web Store in early January if not compliant,” Google’s Oct. 1 post reads, adding:
“Today over 70% of malicious and policy violating extensions that we block from Chrome Web Store contain obfuscated code.”
While not making specific references to any form of extension in particular, Google’s decision comes as reports of surreptitious use of apps, extensions and more to mine cryptocurrency surface with increasing regularity.
As Cointelegraph reported last month, 2018 has seen an almost 500 percent rise in reports of cryptocurrency mining malware.
“Obfuscation techniques also come with hefty performance costs such as slower execution and increased file and memory footprints,” Google added.
Source: William Suberg, CoinTelegraph
Articles listed with Cash Tech News as the author are either general information, or may have been imported from another website, to bring our readers a rich media experience that encompasses articles that we find interesting, as well as those curated by others.
The views and opinions expressed here are for informational purposes only, and should not be confused with professional financial advice. These opinions are solely those of the author and do not necessarily reflect the views of CashTechNews.com. Every investment and trade involves risk. You should conduct your own research, and contact your professional financial advisor before making any investment.
Corrections, feedback, and ideas should be submitted through the website contact form.