Malware in web browser extensions

[mmartinez]

Hi Guys,

I was checking into see if anyone has been seeing a climb in web browser malware being installed through browser extensions? Causing pop ups to appear when on a web browser? If so is there a script I can create to be proactive so our faculty members can avoid the issue?

Thanks

[bentoms]

@mmartinez, which browser(s)?

Oh & FWIW, Safari keeps a record of extensions in the users keychain: https://macmule.com/2014/10/15/deploying-installing-safari-extensions-on-safari-6-1-7-2/

[RobertHammen]

Lot of fake Flash installers out there that install adware et. al.

Site that discusses a lot of these issues, including how Apple is starting to crack down on the Adware with Protect, at http://www.thesafemac.com

Adware Medic is useful tool to run to clean up affected systems.
http://www.adwaremedic.com/index.php

But it's not scriptable. You may want to consider writing an Extension Attribute which looks for the presence of some of the files associated with this malware, then you can write scripts to remove it, scoped to a Smart Group matching the EA.