Date: Tue, 20 Apr 2010 12:25:07 -0500 To: "Kaffee Klatchers via BCC": ; From: "Gene Elias" Subject: [KaffeeKlatch] Trojan virus poses as Google Chrome extension April 19, The Register (International) Trojan virus poses as Google Chrome extension. Miscreants have created a Trojan virus that poses as a Google Chrome extension, according to The Register. Spammed messages attempt to dupe prospective marks into trying an add-on that “helps you better organise your documents received in your email.” Interested parties are pointed towards a counterfeit Google Chrome Extensions page, which offers a malware executable. More observant punters will notice that the download is offered in an .exe file and not a .crx Google Chrome extension, The Register indicated. Such markers are easily missed, however. The Trojan horse malware on offer (identified by Romanian security firm BitDefender as the Agent-20577) blocks access to Google and Yahoo webpages. Attempts to reach these sites on infected machines are hijacked and redirected to counterfeit sites. Such trickery is commonly a prelude to either phishing attacks or a technique by the hackers behind the trick to gain affiliate income from scareware slingers or other undesirables. Source: http://www.theregister.co.uk/2010/04/19/google_chrome_trojan/