New Malware Service Promises to Skip Google’s Review Process and Bring Your Malware Directly to the Chrome Store

• Russian hackers sell Chrome extension service that bypasses Google Store moderation
• Malicious add-on spoofs legitimate sites with full-screen iframes to steal credentials
• Varonis advises strict corporate whitelisting and consumer extension audits for protection

Russian hackers sell a service that allows other criminals to spoof legitimate websites, tricking victims into revealing their login credentials or even making fraudulent wire transfers.

A malicious actor aka “Stenli” (Stanley) recently began offering a service that essentially guarantees that a malicious Chrome extension will “pass Google Store moderation” and land in the browser’s add-ons repository.