這批惡意擴充功能表面上會偽裝成遊戲、工具或影音相關外掛程式，實際上卻在背景執行資料蒐集與惡意操作。研究發現，所有外掛都會將竊取的帳號資訊、瀏覽紀錄與敏感資料回傳至同一套後端系統，顯示攻擊者透過不同開發者帳號分散上架，但實際由同一組織操控。
進一步分析顯示，這些外掛具備多種攻擊能力，包括定期劫持用戶的Telegram登入狀態、在瀏覽器中植入通用後門，以及竊取Google帳號識別碼（sub ID）等資訊。特別是sub ID具有高度追蹤性，即使使用者更換密碼或信箱，仍可被長期辨識與追蹤，等同建立一份「永久數位身分檔案」。
除了帳號資料外，部分外掛還能在用戶瀏覽的每一個網頁中注入廣告或惡意程式碼，甚至擷取姓名、電子郵件與個人檔案資訊，進一步擴大攻擊面。整體來看，這類攻擊已從單純資料竊取，升級為可長期監控與操控使用者行為的複合型威脅。
值得注意的是，這108款外掛在Chrome Web Store上累積下載量已超過2萬次，代表已有相當數量用戶可能在不知情的情況下遭到影響。
資安專家建議，用戶應立即檢查並移除來源不明或權限異常的擴充功能，尤其是要求「可讀取與變更所有網站資料」的外掛應提高警覺。同時，建議開啟瀏覽器的強化安全防護機制，並定期清理不常使用的擴充工具，以降低風險。
108款完整外掛名單：
▪️Telegram Multi-account
▪️Web Client for Telegram - Teleside
▪️YouSide - Youtube Sidebar
▪️Web Client for Youtube - SideYou
▪️Web Client for TikTok
▪️Text Translation
▪️Page Locker
▪️Page Auto Refresh
▪️Web Client for Rugby Rush - SideGame
▪️Formula Rush Racing Game
▪️Piggy Prizes - Slot Machine
▪️Slot Arabian
▪️Frogtastic
▪️Black Beard Slot Machine
▪️Indian - Slot Machine
▪️Mahjong Deluxe
▪️Crazy Freekick
▪️Slot Car Racing
▪️Clear Cache Plus
▪️Galactica Delux - Slot Machine
▪️Speed Test for Chrome - WiFi SpeedTest
▪️Game SkySpeedster
▪️Master Chess
▪️Hockey Shootout
▪️Odds Of The Gods - Slot Machine
▪️Billiards Pro
▪️Three Card Poker
▪️Donuts - Slot Machine
▪️Archer - Slot Machine
▪️Rugby Rush
▪️Bingo
▪️Web Client for game Cricket Batter Challenge
▪️Slot Machine Zeus Treasures
▪️Horse Racing
▪️Aztec - Slot Machine
▪️Straight 4
▪️Slot The Gold Pot
▪️American Roulette Royale
▪️Asia Slot
▪️Web Client for game Drive Your Car
▪️Jurassic Giants - Slot Machine
▪️Street Basketball
▪️Tarot Side Panel
▪️Dragon Slayer - Slot Machine
▪️Best Blackjack
▪️Book Of Magic - Slot Machine
▪️Snake - Slot Machine
▪️Dice King - Classic Craps And Roll Game
▪️Slot Ramses
▪️Battleship War
▪️Gold Miner 2
▪️Greyhound Racing - Dog Race Simulator
▪️Hercules: Sports Legend
▪️Flicking Soccer
▪️Voodoo Magic - Slot Machine
▪️Web Client for Hockey Shootout - SideGame
▪️MASTER CHECKERS
▪️Watercraft Rush
▪️Car Rush
▪️Video Poker Deuces Wild
▪️Slot Machine Ultimate Soccer
▪️Christmas Eve - Slot Machine
▪️Columbus Voyage - Slot Machine
▪️High or Low Casino Game
▪️Goalkeeper Challenge
▪️Tropical Beach - Slot Machine
▪️BlackJack 3D
▪️Web Client for game Classic Bowling
▪️Raging Zeus Mines
▪️Classic Backgammon
▪️Slot Machine The Fruits
▪️Baccarat
▪️Mini Golf World
▪️Gold Rush - Slot Machine
▪️Pirat Slot
▪️40 Imperial Crown - Slot Machine
▪️3D Soccer Slot Machine
▪️Premium Horse Racing
▪️Tanks Game
▪️Caribbean Stud Poker
▪️Wild Buffalo - Slot Machine
▪️Aqua - Slot Machine
▪️Game Crypto Merge
▪️Sherwood Forest - Slot Machine
▪️Web Client for game Fatboy Dream
▪️Lone Star Jackpots - Slot Machine
▪️Hidden Kitty Game
▪️Keno
▪️Jokers Bonanza - Slot Machine
▪️Penalty Kicks
▪️Pai Gow Poker
▪️Metal Calculator
▪️Farm - Slot Machine
▪️Rail Maze Puzzle
▪️RED DOG CARD GAME
▪️Coin Miner 2
▪️Black Ninja - Slot Machine
▪️Pyramid Solitaire
▪️Chrome Client for Downhill Ski - SideGame
▪️Slot Machine Mr Chicken
▪️Web Client for French Roulette - SideGame
▪️3D Roulette Casino Game
▪️Slot Machine Space Adventure
▪️Whack 'em All
▪️Video Poker Jacks or Better
▪️Swimming Pro
▪️InterAlt
▪️Gold of Egypt - Slot Machine
點擊閱讀下一則新聞
