Chrome Web Store 'Poper Blocker' Extension Exfiltrates User Data

According to cybersecurity researchers, the 'Poper Blocker' extension, which purports to block pop-up advertisements, was found to be engaging in covert data collection. The extension harvested browsing history, cookies, and other session data, transmitting it to remote servers controlled by the threat actor. The malicious activity was discovered after users reported unusual browser behavior and elevated network traffic. While Google has since removed the extension from the Chrome Web Store, the incident highlights ongoing challenges in the vetting process for browser extensions and the potential for malicious actors to abuse trusted platforms. The extension's presence on the store for an extended period suggests it may have bypassed initial security reviews or updated its behavior after passing initial checks.