Hackers using malicious Gmail, Microsoft Edge extension to spy on emails

Malicious extension by the hacker group titled 'SharpTongue' is capable of stealing email content from Gmail and AOL, according to cybersecurity firm Volexity

Hackers using malicious Gmail, Microsoft Edge extension to spy on emails

Photo for representation. — iStock

New Delhi, July 31

A group of hackers from North Korea is using a malicious Google Chrome or Chromium-based Microsoft Edge extension to spy or user email accounts.

The malicious extension by the hacker group titled 'SharpTongue' is capable of stealing email content from Gmail and AOL, according to cybersecurity firm Volexity.

"This actor is believed to be North Korean in origin and is often publicly referred to under the name Kimsuky. The definition of which threat activity comprises Kimsuky is a matter of debate among threat intelligence analysts," the cybersecurity researchers said in a statement.

SharpTongue is targeting and victimising individuals working for organisations in the United States, Europe and South Korea who work on topics involving North Korea, nuclear issues, weapons systems, and other matters of strategic interest to North Korea.

Within the last year, Volexity has responded to multiple incidents involving SharpTongue and, in most cases, has discovered a malicious Google Chrome or Microsoft Edge extension dubbed as 'SHARPEXT'.

"Since its discovery, the extension has evolved and is currently at version 3.0, based on the internal versioning system. It supports three web browsers and theft of mail from both Gmail and AOL webmail," the researchers informed.

By stealing email data in the context of a user's already-logged-in session, the attack is hidden from the email provider, making detection very challenging.

Similarly, the way in which the extension works means suspicious activity would not be logged in a user's email "account activity" status page, were they to review it, the cybersecurity firm noted. IANS

Tribune Shorts


Top News

NITI meet: PM Modi urges states to focus on 3Ts, modernising farm sector

NITI meet: PM Modi urges states to focus on 3Ts, modernising farm sector

Telangana Chief Minister K C Rao boycotts meeting, while Bih...

First ever repair of US warship in India; arrives at Chennai shipyard

First ever repair of US warship in India; arrives at Chennai shipyard

A red-letter day for the Indian shipbuilding industry, said ...

ISRO's maiden SSLV carrying earth observation and student satellites lifts off from Sriharikota spaceport

Satellites placed into wrong orbit, no longer usable: ISRO on its maiden SSLV mission

SSLV had lifted off from Sriharikota spaceport on Sunday mor...

Mandeep Kaur's death: Indian consulate in NYC extends assistance; FIR registered against husband, in-laws in UP

Mandeep Kaur's death: Indian consulate in NYC extends assistance; FIR registered against husband, in-laws in UP

Mandeep Kaur, who was tortured at the hands of her husband, ...

Cities

View All