Your Browser Extensions May be Stealing from You
By: Jim Stickley and Tina Davis
April 29, 2025
When the FBI releases an urgent warning to three million Chrome users, it’s time to pay attention. The alert warns malicious file conversion software, and their fake URLs, are hijacking personal information. It’s also at a time when malicious browser extensions and the hackers behind them are threatening Google Chrome users everywhere.
Convert with Caution
File conversion is a common tool used to change file formats, like changing a .pdf to a .docx file, or the reverse. The FBI says cybercriminals worldwide are creating websites hyping free file conversion services or free software downloads to convert files on your own. Their warning also finds victims are told MP3 or MP4 download might also being used. But what’s really going on is rarely known to a victim who learns their identity has been stolen—and they have no clue how it happened.
“Scraping” is a big part of this cybercrime. Scraping happens when a victim sends files for conversion and the cybercriminal on the other end scrapes them for all the sensitive PII they hold. Jim Stickley, CEO of Stickley on Security warns “Free software downloads for file conversions may work as advertised. What you don’t know is the download can install malware, take remote control of your device, monitor your financial transactions or install ransomware. Browser vulnerabilities, like zero day exploits, are also exploited by the crooks, so do your homework before you act.”
Be on the Lookout
Here are just a few of the 16 compromised browser extensions removed by Chrome: Adblocker for Chrome, Video Effects for YouTube and Audio Enhancer, and Super Dark Mode and Emoji Keyboard Emojis for Chrome. For a complete list, check the FBI Denver Field Office website. The Denver Office also says file scraping steals PII like Social Security numbers, date of birth, phone numbers, banking and cryptocurrency information, and passwords and email addresses are also hijacked.
The advice to Google Chrome users is stay away from using extensions whenever possible (especially those you don’t really need). If you’re not sure, shut the extensions off in Chrome and if you find you don’t need them, delete them.
Using “free” anything found online means it may have a hefty price tag. So, beware your online travels, lose extensions you don’t need, and don’t include “free” in your web searches.