fbpx
Frame-14

Privacy Ninja

        • DATA PROTECTION

        • CYBERSECURITY

        • Penetration Testing

          Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

The Great Suspender Chrome Extension’s Fall From Grace

The Great Suspender Chrome Extension’s Fall From Grace

Google has forcibly uninstalled the immensely popular ‘The Great Suspender’ extension from Google Chrome and classified it as malware.

The Great Suspender is a Chrome extension that will suspend unused tabs and unload its resources to decrease the browser’s memory usage. When a user is ready to use the tab again, they simply had to click it on to make it visible.

This extension was immensely popular with over 2,000,000 users and has consistently been a recommended extension due to its ability to reduce Chrome’s memory usage.

When Google removed it on Thursday, users were left with a message stating that “This extension contains malware,” but not providing any further context on how to recover their suspended tabs or why they removed it.

With the abrupt removal of The Great Suspender extension, users who had suspended tabs were upset that they could not access them again.

Also Read: The 5 Benefits Of Outsourcing Data Protection Officer Service

It is possible to see a list of suspended tabs through Chrome’s built-in History feature and use that list to recover the URL of the suspended web page.

Instructions on how to do this, as well as other methods, can be found on this support page.

The Great Suspender’s fall from grace

In June 2020, the developer of The Great Suspender sold the extension to an unknown entity as he did not have the time to properly maintain the project.

At the time, users were suspicious of the sale was suspicious as to why someone would purchase a free open-source extension that did not generate any revenue for the developer.

As free extensions have been purchased in the past and then monetized with malicious changes, such as injecting ads or stealing information, users were concerned the same would happen with The Great Suspender.

Unfortunately, the user’s concerns were justified when the new maintainer updated the extension in October 2020 to release version 7.1.8, which included scripts that tracked the user’s behavior and executed code retrieved from a remote server.

This malicious activity led to Microsoft removing the Microsoft Edge Store extension and a new 7.1.9 version to be released without the malicious scripts.

The extension, though, continued to remain in the hands of these unknown developers, who could introduce malicious code at a later date, potentially without users’ noticing.

On Thursday, Google pulled the Chrome Web Store extension as malware but has not provided any reason for doing so. It is not clear if Google discovered additional malicious scripts or reacted to its history and the community’s concerns.

For those who truly want to use The Great Suspender extension, the GitHub project page continues to offer version 7.1.6, which is the final release of the extension when owned by the original developer and does not contain malicious scripts.

Also Read: How To Prevent WhatsApp Hack: 7 Best Practices

To install the extension, you will need to do so through Chrome’s developer mode, which is not recommended as it removes the security benefits offered by Google’s extension review process.

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us