Security researcher claims 35 Chrome extensions with 4,000,000+ installs 'include some kind of spyware or infostealer'

You'd be forgiven for thinking that if you downloaded a Google Chrome extension from the official Chrome Web Store, it was likely to be above board. Not so, according to the founder of browser extension security platform Secure Annex, who claims he's identified 35 Chrome extensions with 4 million total installs that he concludes 'include some kind of spyware or infostealer.'The accused extensions have several things in common. They use many of the same code patterns, connect to many of the same servers, and require the same system permissions (via Ars Technica). However, John Tuckner, founder of cybersecurity firm Secure Annex, also found they use obfuscated code that looks designed to conceal their behaviour."These extensions have some strong relations and most claim to actually perform some purpose like ad blocking, extension protection, better search results, or privacy protection which likely keeps them available in the web store", says Tuckner."While all are different, the code fo...