Hacker Steals $7 Million Worth Of Ethereum In 3 Minutes!

 Israeli Blockchain technology startup announced that an unknown hacker had hacked its website and trick investors into paying $7 million worth of Ethereum into the hackers account.

 The Israeli Blockchain technology startup, CoinDash launched an Initial Coin Offering (ICO) for the trading of Ether in which investors could pay and send Ether to token sale's smart contact addresses. Not long after the launch, a hacker hijacked the website and then changed the Ethereum address while the investors sent about 43438.455 into the wrong address belonging to the hacker. In less than 3 minutes of the hack, the hacker had stolen $7 million from the investors.

Also Read: Man to server 3-years jail term for uploading Deadpool on to his Facebook page

 Although CoinDash warned within a few minutes of the launch that its website had been hacked, telling investors not to send Ethereum to the address on the site, it was already late because the hacker had trick most of the investors.

 "It is unfortunate for us to announce that we have suffered a hacking attack during out token sale event," a statement from CoinDash read.

 "During the attack, $7 Million was stolen by a currently unknown perpetrator. The CoinDash Token Sale secured $6.4 Million from our early contributors and whitelist participants, and we are grateful for your support and contributions."

 The company said that they will refund all those that send Ethereum to the fraudulent Ethereum  address when the compromised site (CoinDash.io) was running but wont compensate those who sent funds to the fraudulent address when the site was shutdown.

Beware! This Whatsapp Scam Will Easily Steal Your Payment And Personal Data

  
 Fake WhatsApp emails and texts messages pretending to come from WhtsApp warning users that their subscription would end soon while urging them to renew their subscription.

 Researcher Graham Cluley warns that those crooks aim to trick users into clicking links that are in those messages which might result to the user handing over payment credentials to the attacker(s).

"Have you received an email claiming to come from WhatsApp that warns that you have been using the service for more than a one and that it's time to take out a subscription?"

"Beware! This emails are, of course, a scam designed to trick you into clicking links that might result in you handing your payment information over to fraudsters," an excerpt from Graham Cluley read.

Also Read: Hackers holds Disney to ransom over stolen copy of Pirates of the Caribbean 5

Below is the message the crooks are circulating to WhatsApp users.

Your subscription is ending soon

Please update your payment information now

UPDATE YOUR PAYMENT INFORMATION

Our records indicate that your WhatsApp trial service is exceeding the one year period. At the completion of your trial period your WhatsApp will no longer be able to send or receive message. To continue using WhatsApp without interruption, we nee you to subscribe for any of our subscription periods

 Graham Cluley went on to advise WhatsApp users not be "duped into clicking on suspicious links claiming to come from WhatsApp suggesting you need to pay subscription to continue use the app."

 He advised users to "always be wary of unsolicited SMS text messages claiming to come from WhatsApp demanding that you verify your account and buy a WhatsApp subscription."

Hackers Exploits Coding Error, Steals $31 Million Worth Of Ethereum

 Another ethereum hack? ethereum hack is quite becoming disturbing. Two days ago Techfoe made a post in which over 7 milliom worth of ethereum were lost when a hacker hacked CoinDash website during an Initial Coin Offering (ICO).

 Latest news coming in says a whooping $31 million worth of ethereum has been stolen! According to coding service parity, a vulnerability exists in the latest 1.5 version and later version of its software which acts as a backbone of cryptocurrency wallets.

 The critical flaw, discovered in a specific multi-sig contract called wallet.sol has resulted in at least three wallets being compromised and the loss of approximately $31 million dollars worth of ethereum.

Also Read: Marijuana delivery startup Eaze suffers data breach, hacker demands $70M ransom

 White hat hackers from Parity have tried to mitigate the issue by emptying every vulnerable wallet they find into temporary which are vulnerable to the hack. The white hackers have so far recovered about 377,000 ethereum which amounts to $77 million.

Some victims of the hack includes Swarm City, a cryptocurrency commerce platform lost about 44,055 ethereum which is worth $9 million.  Another company named Edgeless Casino lost roughly $5.6 million while another called Aeternity lost close $17 million.

In a statement, the White hat researchers have assured those that their ethereum were drained to be patient as they will returned back when the vulnerability has been fixed.

"If you hold a multisig contract that was drained, please be patient," the white hat researchers said in the statement." They will be creating another multisig for you that has the same settings as your old multisig but with the vulnerability removed and will return your funds to you there."

Sweden Accidentally Leaks Personal Data Of Nearly All Citizens Online

  A massive trove of Swedish citizens belonging to Swedish Transport Agency (STA)(Transportstyrelsen) was mistakenly uploaded onto an unprotected cloud server where it might have been leaked to anyone in the world.

 According to a Swedish Newspaper, the breach took place in September 2015 when STA handed its IT services which included database management to IBM sub-contractors in Eastern Europe (Romania, Serbia and Czech Rep.) who had access to the data without any security clearance. 

Also read: Hackers exploits coding error, steals $31 Million worth of Ethereum

  In March 2016, the Swedish Secret Service found out that the cloud server where those data were uploaded lay unprotected. 

 An investigation into the case was later carried out and it was found that the data available on the server contained personal information such as address, names, vehicle details and pictures of almost every citizen in the country. Details of government military vehicles, driver's license records of military and police officials and also personal details of military members in the secret units and whole lot of other data were part of the breach. 

 After revelation of the leak, the STA's boss Maria Agren resigned from office and was later charged to court. Surprisingly, the court asked her to pay just half of her monthly salary 70,000 Swedish Krona (about $8,500) as punishment for the breach.

Also read: Hackers Breach Radio Station, plays F**K Donald Trump mp3 clip

"All of this was just outside the proper agencies, but outside the European Union, in the hands of people who had absolutely no security clearance. All of this data can be expected to have been permanently exposed," said Rick Falkvinge who is the founder of The Pirate Party. 

"Unlike breaches where malicious users sasaran vulnerable systems, this leak of personally identifiable information was the result of carelessness."

Italy's Largest Bank, Unicredit Suffers Data Breach, 400,000 User Accounts Affected

  
 Italy's largest bank, UniCredit has suffered a massive data breach involving 400,000 user accounts.

 The data breach which is seen as one of the biggest breaches in European banking, affected hundreds of thousands of UniCredit customers. The perpetrators of the hack gained access to biographical and loan data of UniCredit's clients. 

 A statement released by UniCredit read:

"A first breach seems to have occurred in September and October 2016 and a second breach which has just been identified in June and July 2017. Data approximately 400,000 customers in Italy is assumed to have been impacted during these two periods."

No data, such as passwords allowing access to customer accounts or allowing for unauthorized transactions has been affected, whilst some other personal data and IBAN [account] numbers might have been accessed"

Also Read: Hackers exploits coding error, steals $31 Million worth of Ethereum

The bank discovered the breach when they found that users from third party were looking through clients data which suggests that the hack was conducted by a third-party supplier affiliated with the bank. 

 UniCredit has stated that they will be investing €2.3 billion into upgrading and strengthening its IT systems. With the GDPR being enforced next year by the European Union, banks will have to strengthen their IT systems to avoid huge fines if a breach were to occur.

 UniCredit bank will be reaching out to its affected customers.

Bitcoin Exchange Boss To Serve Jail Term For Facilitating Ransomware Transactions

  
 A Florida ex-school board member, Michael Murgio has pled guilty to making a false statement in relation to running an illegal Bitcoin exchange service.

 According to the FBI, Michael Murgio along side his son Anthony Murgio with another person named Yuri Lebedev ran Coin.mx as an unlicensed currency exchange. The trio used the service to hide transactions that includes facilitating ransomware payouts as "collectible memorabilia".

Also Read: Hackers exploits coding error, steals $31 Million worth of Ethereum

 Coin.mx was run by an Israeli named Gary Shalon, a man that was linked to a massive hacking operation that compromised personal data of over a 100 million people including the likes of JP Morgan. 

Sun-sentinel says that Michael Murgio admitted to making false statement to the national Credit Union Administration following a plea.

 The Dept. of justice says the two (father and son) paid $150,000 to gain board of directors seats on the Hope Credit Union. Hope was used to facilitate coin.mx transactions in Oct. 2015 prior to its liquidation.

 Michael Murgio is likely to face 16 months in a US federal prison.

Hbo Hacked: Games Of Thrones, Other Tv Series And Over 1.5Tb Of Data Leaked Online

 Hackers have broken into the HBO networks and leaked several unreleased episodes of TV shows including next week's Game of Thrones.

According to Jio India suffers data breach, 120 million customer data dumped online

"What's its name? Oh i forget to tell. Its HBO and Game of Thrones......!!!!!!You are lucky to be the first pioneers to witness and download the leak. Enjoy it & spread the words. Whoever spreads well, we will have an interview with him. HBO is falling," the mail read.

 HBO who suffered similar hack in 2015 when the first 4 episodes of Game of Thrones Season 5 were leaked online, released a statement to confirm the breach.

"HBO recently experienced a cyber incident which resulted in the compromise of proprietary information," HBO said in the statement further adding that investigation into the case have began with the help of law enforcement and cyber security firms.

 HBO is yet to comment on the specifics of the leak

Privacy Concerns: Amazon Suspends Sales Of Blu Smartphones

 Online retailing giant, Amazon has suspended the sales of BLU phones due to privacy security concerns, CNET reports.

  Amazon embarked on the move after security researchers from Kryptowire, last week demonstrated how software in Blu phones collected its users data and sent it over to servers in China. 

 "Because security and privacy of our customers is of utmost importance, all BLU phone models have been made unavailable for purchase on Amazon.com until the issue is resolved,"Amazon said in a statement.

Also read: Malware Attack shuts down Virginia State Police email

 BLU in its defense said the software which was created by a company in Shanghai called Shangha Adups technology denied any breach of customer data. They explained that the company had "several policies in place which takes customer privacy and security seriously." 

The company (Blu) cited Kryptowire executive Tom Karygiannis as saying they didn't do anything wrong although Karygiannis later told CNET that he didn't authorize BLU to make any public statement on his behalf.

 BLU got into the american market with its cheap smartphones and immediately became an alternative to the likes of Samsung and Apple. 

Close To 175,000 Iot Chinese Security Cameras Vulnerable To Easy Hack

Roughly about 175,000 Internet of Things (IoT) connected security cameras manufactured by Shenzhen Neo Electronics are vulnerable to cyber attacks.

 According to Bitdefender researchers, several buffer overflow vulnerabilities were discovered in two camera models (iDoorbell and the NIP-22) manufactured by the surveillance and security solutions company.

"Several buffer overflow vulnerabilities (some before authentication) are present in the two cameras studied, the iDoorbell mode and NIP-22 mode, but we suspect that all cameras sold by the company use the same software and are thus vulnerable," the post read. "These vulnerabilities could allow, under certain conditions, remote code execution on the device. This type of vulnerabilities is also present on the gateway which controls the sensors and alarms."

 Researchers at Bitdefender believes that other models made by the company running the same firmware are vulnerable to the hack too. Bitdefender explains that the security cameras uses Universal Plug and Play (UPnP) which opens port automatically in the routers's firewall to allow the access from the internet. The researchers found between 100,000 and 140,000 vulnerable when querying for the HTTP web server and RTSP server. 

Also Read: UK hacker exploits online bank loophole to steal £100,000

"We found between 100,00 and 140,000 devices when searching for the HTTP web server, and a similar number when searching for the RSTP server (both vunlerable). These are not necessary the same devices, as some have only one service forwarded. We estimate that the real number of unique devices is around 175,000," the report read.

 The researchers said anyone could easily exploit the flaws and access the livestream by logging in the default credentials such as "user or "guest" for both password and username.

Hacker Who Stopped The Spread Of Wannacry Ransomware Arrested By The Fbi

 Killer of the WannaCry ransomware has been arrested by the FBI in the U.S. for allegedly creating a banking malware that steals password and user credentials.

 The hacker, Marcus Hutchins who owns the twitter handle, MalwareTech was arrested this week in Nevada where he was about to board a plane back to the UK after attending the Black Hat and Def Con conference. The FBI who have been on Hutchins trail for the past two years, arrested him for his alleged role in the spread of the Kronos banking malware which wrecked havoc between July 2014 and July 2015.

Also Read: The Mirai threat: How Hackers could shut off 23 Countries access to the internet

 According to an indicting PDF, Hutchins and an unknown conspirator created and distributed the trojan on the now shuttered AlphaBay marketplace. The Kronos was mostly distributed using phishing emails and would lead unsuspecting computers users to fraudulent websites that was designed to look legit like real banking institutions. This trojan would then steal the victims bank credentials.

Privacy Group Says Hotspot Vpn Threatens Users' Privacy, Snoop And Monetizes Web Traffic

  A digital right group called Center for Democracy & Technology (CDT), on Monday urged US federal authorities to carry out an investigation into on VPN provider AnchorFree for deceptive and unfair practices.

 According to a VPN usage now a crime in the UAE, offenders to pay up to $545,000

The CDT group said that the Hotspot Shield VPN app which uses more than five third party tracking libraries, discloses other sensitive data, including SSID/BSSID networks names, MAC address and device IMEI numbers which it uses to optimize the advertising features.

Ukrainian Cyber Police Arrests Hacker For Facilitating Spread Of Petya.A Malware

 The Ukrainian cyber police have busted a 51-year-old Ukrainian accused of spreading the deadly Petya.A virus. 

 According to local reports, the suspect made an online tutorial video explaining how people could use the Petya.A malware to infects other people's computer systems. This Petya ransomware infects the Master Boot record(MBR) and then encrypts the hard drive of the victims computer. Locking up the whole files and programs.

Also read: Japanese Police arrests 14-year-old for creating ransomware and dumping source code online

 A raid conducted by police at the suspects residence saw them retrieve computer equipements and malicious software similar to the Petya.A.

Some items recovered from the suspect

 Ransomware attacks have doubled within the last two years. If you could remember, Techfoe made a post sometime ago in which hackers and cyber criminals were on the loose, infecting victims worldwide with the Petya ransomware with most of the attacks happening in Ukraine.

Everything You Need To Know About Sarahah Anonymous Messaging App That Has Gone Viral

 There are several instant messaging apps on the internet but not all gives us an anonymous identity online. 

 Sarahah is an anonymous instant messaging app created by Saudi developer ZainAlabdin Tawfiq and so far has over 300 million users. The app name "Sarahah" which means "Honesty" in Arabic, according to the creator was made "to help people self-develop by receiving constructive anonymous feedback."

 The purpose of this app according to Sarahah's website, is to help people enhance their "areas of strength, strengthen  Areas for Improvement at your workplace" and with friends, it will help "improve your friendship by discovering your strength and areas for improvement."

Also Read: i.Con Smart Condom: Worlds first Smart Condom is here

How Sarahah operates
Sarahah  is a light-weight application that is available for free on iOS and Android operating systems and as well offer two languages which is is English and Arabic. 

 To get started, one has to download the app for any of the two mentioned platforms and then you create an account with a custom url. You create a username, name, password, email address and of course, the app doesn't require your mobile number to set-up your account due to its anonymity purpose.

 Once you are done setting up your account, you can share your Sarahah link to social media sites such as Facebook, WhatsApp, Twitter etc and those who have your link can then message you. Know that anybody can message you including your friends and any random stranger.

 Users of this app can only receive anonymous message(s) but can reply back to the sender. When you receive a message, you can favourite the message or block the person or even report the person who message you.

Final Thoughts
 The maker of Sarahah messaging app has a good mission which is to help individuals develop their "areas of strength" and "improve" by receiving constructive evaluations or criticisms from people who might want to help but cant risk their identity. This could be in your work place but you cant pour out your heart to your boss or friend, telling them of that annoying habit(s) because you don't have the courage to do so in their face.

 Amid all the exciting features of this app, there are so many threats that surround it such as cyber bullies, hate messages, and even life threatening messages.

Ukrainian Postal Service Suffers 48-Hour Ddos Attack

 Ukraine's national postal service website have suffered a two-day-long distributed denial of service (DDoS) attack, launched against them by unknown hackers.

  According to a post on its Facebook page, Ukrposhta said that the attackers on Monday began to flood their website with junk traffic and later continued on Tuesday.

Also Read: Ukrainian Cyber Police Arrests Hacker for Facilitating Spread of Petya.A malware

"Friends, we've been DDoSed," the company said in a post on Tuesday."During the first wave of the attack, which began yesterday in the morning, our IT services could normalise the situation, and after 17:00, all the services on the site worked properly.

"But today, hackers are at it again. Due to their actions, both the website and services are working, but slowly and with interruptions."

 Ukraine has suffered a couple of cyber attacks this year. In June this year Ukraine was heavily hit by the Notpetya ransomware attacks, with most of the attacks targeting Public transport services, banks, Power and television stations. 

 Some few days ago, the Ukrainian cyber police arrested a man accused of facilitating the spread of the Peyta virus.

Google Pays High School Student $10,000 For Discovering Critical Bug

 Google has awarded an Uruguayan high school student $10,000 for discovering and reporting a bug he found in Google's App Engine server.

The student, Ezequiel Pereira, explained that he used Burp to change the Host Header in requests sent to the server (*.appspot.com) in an attempt to get access to internal App Engine apps (*.googleplex.com) and in the process came across a website that had no security on it.

 Pereira explained that his initial attempt to access App Engine apps failed. The server was either returning a "404 Not Found error" or was checking whether the request was coming from a Google account (username@google.com) instead of the normal google account.

Also Read: New iOS video bug crashes any iPhone device -- follow this tip to protect your iPhone

However, Pereira eventually stumbled upon a Google website (yags.googeplex.com) where no username check was performed and other security measures were absent.

"The website's homepage redirected me to '/eng', and that page was pretty interesting, it had many links to different sections about Google services and infrastructure, but before i visited any section, i read something  in the footer: 'Google Confidential'," Pereira explained.

 The student explained that he didn't poke any further when he saw the confidential notice, instead the retraced the steps used in discovering the vulnerability and then reported it to Google. 

The student produced the bug using Burp, went to the Repeater tab. Set the host to "www.appspot.com" and the set the sasaran port to "443", tick the "Use HTTPS" option. Write a raw HTTP request: GET /engHTTP/1.1
Host: yags.googleplex.com
(and then two extra lines before clicking on go)

Google confirmed the report as valid and then awarded the student several weeks later.

Hackers Launches Cyber-Attack On Venezuela, Renders Millions Without Phone Service

A hacking group that calls itself "The Binary Guardians" has claimed responsibility for the massive attacks in Venezuela that took down websites of the government, National Assembly and the Supreme Court.

 According to Security week, the cyber attack which took place earlier this week affected the country's mobile phone operators; Movistar and Digicel, and as a result left about seven million mobile phone users without network service.

 "These terrorist actions which affected the Movilnet's GSM platform on Wednesday left without communication seven of the state operator's 13 million users," Science and Technology Minister Hugbel Roa said.

Also Read: Liberia's entire internet attacked with Mirai Botnet14, UK threatened

 Roa explained that the black-out was part of a wave of attacks that began on Monday when dozens of government and private company websites were hacked. 

 The Minister said that the attacks were carried out with the help of foreign agents whose aim was to disrupt the country's connectivity. He went further to add that an investigation was ongoing into the matter.

Hbo Hackers Rejects $250,000 Ransom Offered By Hbo, Threatens Even More Leaks!

 HBO have offered $250,000 to the hackers who recently broke into their network and stole employee information, scripts and then leaked several unreleased episodes of TV shows including Game of Thrones, Ballers and Room 104.

 The hackers who claimed to have obtained about 1.5 terabytes of data from HBO did not only release HBO up coming TV shows alone but went on to release data such as the company's financial balance sheets, employment agreements, company's emails while demanding a ransom of nearly $6 Million in Bitcoins to prevent more leaks.

Also Read: Italy's Largest Bank, UniCredit suffers Data Breach, 400,000 user accounts affected

 HBO offered the hackers the $250,000 as a bounty payment reward for discovering the vulnerabilities in their computer networks but it doesn't seem well with the hackers who even went further to release more trove, this time including the home addresses and phone numbers belonging to some of the Game of Thrones stars.

 According to a screenshot of an email obtained by Variety, an executive from HBO wrote that the company had not been able to acquire the demanded amount of Bitcoins and then implored the hackers to extend the ransom payment deadline by a week.

 "You have the advantage of having surprised us. In the spirit of professional cooperation, we are asking you to extend your deadline for one week," the HBO executive is quoted to have written in the email.

 "As a show of good faith on our side, we are willing to commit to making a bug bounty payment of $250,000 to you as soon as we can establish the necessary account and acquire the Bitcoin, or we can wire the funds as soon as you give us the account information."

The hackers have refused to honour the usulan offered by HBO, apparently due to the fact that the figure is just a fraction of what they demanded. However, the have threatened to releasemore files from its stolen trove every Sunday until the ransom is met.

Four Busted In India For Leaking Upcoming Episode Of Game Of Thrones

 The Indian authorities have arrested four people for reportedly leaking an episode from HBO's Game of throne's Tv series before it was aired on Monday.

 According to local media, the Deputy Commissioner of Police Akbar Pathan said they received a complaint for a company, and then launched an investigation and have "arrested four individuals for unauthorised publication of the fourth episode from the season seven" of Games of Thrones.

Also Read: Makers of Witcher 3 Database Breached, Hackers Demands for Ransom

 The four people arrested are said to be company employees who possessed official credentials giving them access to the episodes. So far, the four have been accused of criminal breach of trust and computer-related offences, and they would be detained until August 21 pending results of an ongoing investigation.

 HBO recently suffered a data breach in which over 1.5gb of data were stolen including employee information, scripts and the hackers went on release several episodes of TV shows such as Game of Thrones, Ballers and Room 104.

The hackers made a demand of nearly $6 million in Bitcoin to prevent more leaks but HBO offered them $250,000 as a bug bounty payment which only angered the hackers more. The hackers this time time published the names, home addresses and phone numbers belonging to some of the actors starred in Game of Thrones.

 The have threatened to release several episodes of different TV Shows every weekend if HBO doesn't succumb to their demands. Yesterday the hackers lived to their promise, they release several upcoming TV Shows scheduled to return to TV in October.

17-Year-Old Teen Hacks The Us Air Force, Pockets $130,000 As Bug Bounty Reward

A 17-year-old high school kid has emerged as the winner in the "Hack the Air Force" bug bounty jadwal organised by the US Department of Defence (DoD), pocketing $130,000.

 Jack Cable made it to the top by hacking and identifying about 30 critical vulnerabilities in the Air Force cyber infrastructure which was attended by some 272 hackers from "The Five Eyes" (FVEY) intelligence alliance. The participants came from the US, UK, Canada, New Zealand and Australia..

Also read: Privacy Group says Hotspot VPN threatens users' Privacy, Snoop and Monetizes Web Traffic

"Two participants in the jadwal were active duty military personnel and 33 participants came from outside the U.S. Top participating hackers were under 20 years old, including a 17-year-old who submitted 30 valid reports and earned the largest bounty sum during the challenge windows," a statement from the Air Force read.

 In an interview conducted by marketplace, cable said that he found an XML external vulnerability. "I found that i could give it a URl and the application would make a request to that website. And i was able to escalate that after working on it for a few hours into a remote code execution. So that would allow me basically to do whatever i wanted. So i could access all the user data on the website and i could change anything that i wanted to."

 The "Hack the Air Force" jadwal was launched by the US Department of Defence, encouraging hackers to hack the Air Force so as to discover and patch any vulnerabilities in ts cyber infrastructure. This way the hacker would earn money and the Pentagon would also patch any flaw found during the hack.

Hackers Hijack Several Chrome Extensions, Millions Of Users Exposed To Malicious Attack

 Within the last 4 weeks, several Google Chrome web browser Extensions have been compromised and modified to perform malicious activities to users.

Two weeks ago, some hackers compromised the Chrome Web Store account of a developer and hijacked the Copyfish extension and then used it to distribute spam to its users.

 Not too long after the Copyfish incident, another group of hackers hijacked another popular Chrome extension called Web Developer, a tool that offers web development and then modified it to inject advertisement into the web browser of its user number over a million. Web Developer

 According to Proofpoint researcher Kafeine, the hackers involved in the hack gained access to the developers' Google web accounts via phishing emails with malicious links to steal account credentials.

The security vendor identified the below Chrome ad-ons as those that were compromised:

1. CopyFish (2.8.5)
2. Chrometana (1.1.3)
3. Infinity New Tab (3.12.3)
4. Web Paint (1.2.1)
5. Social Fixer (20.1.1)

 The security vendor also believes that Chrome VPN ad-ons; TouchVPN and Betternet VPN were compromised in June the same way.

Proofpoint explained that once the hacker(s) successfully gained access to the account of the developer, the hacker(s) would either inject malicious codes into the extension(s) to perform malicious tasks or they would add malicious JavaScript code into the ad-on and expose users to fake ads in order to steal their passwords and credentials.

CopyFish extension suffered a worse fate than those that Proofpoint mentioned, the hackers that compromised CopyFish moved the whole extension to one of its developers account so as to prevent the makers of the software from removing the infected extension from the Chrome store.