The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) said it identified five malicious Google Chrome Extensions that “surreptitiously track online browser’s activities and steal their data”.

NCC-CSIRT, the Nigerian telecom sector’s cyber security incidence centre, stated this in a statement obtained by FIJ on Friday.

The statement, signed by Reuben Muoka, NCC’s Director of Public Affairs, said the malware were Netflix Party with 800,000 downloads, Netflix Party 2 with 300,000 downloads, Full Page Screenshot Capture Screenshotting with 200,000 downloads, FlipShope Price Tracker Extension with 80,000 downloads and AutoBuy Flash Sales with 20,000 downloads.

READ ALSO: ALERT: New Malware Targeting Privacy of Andriod Users

According to the NCC-CSIRT, all five Google Chrome extensions identified have a high probability and damage potential. They have been downloaded more than 1.4 million times and give access to surfers who want to steal users’ data.

“The users of these Chrome extensions are unaware of their invasive functionality and privacy risk. Malicious extensions monitor victims’ visits to e-commerce websites and modify the visitor’s cookie to appear as if they came through a referrer link. Consequently, the extensions’ developers get an affiliate fee for any purchases at electronic shops,” NCC-CSIRT’s advisory said.

Keeping malicious extensions out of Google Chrome Web Store may be difficult, so NCC-CSIRT has recommended that telecom consumers observe caution when installing any browser extension.

“These include removing all listed extensions from their chrome browser manually. Internet users are to pay close attention to the promptings from their browser extensions, such as the permission to run on any website visited and the data requested before installing it. Although, some extensions are seemingly legit, due to the high number of user downloads, these hazardous add-ons make it imperative for users to ascertain the authenticity of extensions they access,” NCC-CSIRT stated.

READ ALSO: Link in Circulation Promising to Unbar Lines Blocked by NCC is Scam

Extensions add new features to Chrome browser or modify existing behaviour of the programme to make it more convenient for the user.

Google Chrome extensions are software programmes that can be installed into Chrome in order to change the browser’s functionality. These extensions sometimes help to block ads, manage password managers or edit typed sentences automatically.