Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
BLUF
Platform oversight failures allowed millions of users to install spyware disguised as a legitimate ad-blocker.
NEWS
The Poper Blocker extension was found exfiltrating sensitive information while masquerading as a pop-up blocker on the Chrome Web Store. Security researchers reported the malicious activity, but the extension maintained its verified status and accumulated millions of downloads before being addressed.
Why I Care
This incident exposes a massive user base to data theft and erodes confidence in official browser extension marketplaces. It highlights the risk of supply chain attacks where trusted platforms inadvertently host malicious software.
Next Steps
End users must immediately inspect their browser extensions for Poper Blocker and uninstall it if found. IT administrators should audit all third-party extensions across enterprise devices and implement allow-listing policies to prevent unauthorized installations within 48 hours.
Source: Dark Reading ·