Trend Micro has found two malicious browser extensions that hijack Twitter, Facebook and Google+ accounts. The malicious plugins try to appear legitimate, bearing the names Chrome Service Pack 5.0.0 and F-Secure Security Pack 6.1.0. The plugins connect to another website and download a configuration file that allows them to steal the login credentials from a victim’s social networking accounts such as Facebook, Google+. The attackers can then perform a variety of actions, such as like pages, share posts, update statuses and post comments.”]

