Skip to main content
Question

Malware in web browser extensions

  • March 4, 2015
  • 2 replies
  • 9 views

Forum|alt.badge.img+3

Hi Guys,

I was checking into see if anyone has been seeing a climb in web browser malware being installed through browser extensions? Causing pop ups to appear when on a web browser? If so is there a script I can create to be proactive so our faculty members can avoid the issue?

Thanks

2 replies

bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • March 4, 2015

@mmartinez, which browser(s)?

Oh & FWIW, Safari keeps a record of extensions in the users keychain: https://macmule.com/2014/10/15/deploying-installing-safari-extensions-on-safari-6-1-7-2/


RobertHammen
Forum|alt.badge.img+29
  • Esteemed Contributor
  • March 4, 2015

Lot of fake Flash installers out there that install adware et. al.

Site that discusses a lot of these issues, including how Apple is starting to crack down on the Adware with Protect, at http://www.thesafemac.com

Adware Medic is useful tool to run to clean up affected systems.
http://www.adwaremedic.com/index.php

But it's not scriptable. You may want to consider writing an Extension Attribute which looks for the presence of some of the files associated with this malware, then you can write scripts to remove it, scoped to a Smart Group matching the EA.