including credit card information”
Source: A SANS ISC incident contributor has spotted a Chrome extension being pushed onto users via a phishing e-mail. The scam uses links to photos purportedly sent through WhatsApp, the popular messaging service. Following a photo link, the victim is duped into downloading whatsapp.exe, which is essentially the malware dropper file. The malware attempts to disable Windows firewall and disable multiple roadblocks that could prevent the malicious code from executing itself. Just last week, a software engineer discovered a Googe Chrome URL shortening extension carrying a hidden cryptocurrency miner.”]