06-09-2021, 01:11 AM
WARNING to users of "GasNow" Chrome extension (eth gas price tracker) : you are expo
<!-- SC_OFF --><div class="md"><p>The browser extension "GasNow" available for Chrome/Brave allows you to easily keep track of ETH gas price and set up alerts. It has been downloaded by 10 000+ users, ranking it the second most dowloaded gas tracker extension.</p> <p>While usefull, a few days ago the extension was updated :</p> <p>This extension now asks you to be able to <strong>have access and modify what's in your clipboard</strong>.</p> <p>This is a <strong>MAJOR security flaw</strong>. Basically if you copy a wallet address to transfer funds, this extension can now identify this address and switch it with another one when you paste it, which will result (if you don't check what you are pasting) in <strong>your funds being sent to another address, and thus, stolen.</strong></p> <h1>If you are currently using this extension, uninstall it ASAP !!!</h1> <p>If you are not using it, but another similar one, check the permissions you granted because there is a lot of other extensions using this technique...</p> <p><strong>Edit</strong> : This permission has been deleted. Have a look at <a href="/u/Snarkie3">u/Snarkie3</a> comment that shares a statement from GasNow team about this matter <a href="https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/-/h10wdyd">https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/-/h10wdyd</a></p> </div><!-- SC_ON --> submitted by <a href="https://www.reddit.com/user/hereforginger"> /u/hereforginger </a> <br/> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/warning_to_users_of_gasnow_chrome_extension_eth/">[link]</a></span> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/warning_to_users_of_gasnow_chrome_extension_eth/">[comments]</a></span>Kind Regards R
<!-- SC_OFF --><div class="md"><p>The browser extension "GasNow" available for Chrome/Brave allows you to easily keep track of ETH gas price and set up alerts. It has been downloaded by 10 000+ users, ranking it the second most dowloaded gas tracker extension.</p> <p>While usefull, a few days ago the extension was updated :</p> <p>This extension now asks you to be able to <strong>have access and modify what's in your clipboard</strong>.</p> <p>This is a <strong>MAJOR security flaw</strong>. Basically if you copy a wallet address to transfer funds, this extension can now identify this address and switch it with another one when you paste it, which will result (if you don't check what you are pasting) in <strong>your funds being sent to another address, and thus, stolen.</strong></p> <h1>If you are currently using this extension, uninstall it ASAP !!!</h1> <p>If you are not using it, but another similar one, check the permissions you granted because there is a lot of other extensions using this technique...</p> <p><strong>Edit</strong> : This permission has been deleted. Have a look at <a href="/u/Snarkie3">u/Snarkie3</a> comment that shares a statement from GasNow team about this matter <a href="https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/-/h10wdyd">https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/-/h10wdyd</a></p> </div><!-- SC_ON --> submitted by <a href="https://www.reddit.com/user/hereforginger"> /u/hereforginger </a> <br/> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/warning_to_users_of_gasnow_chrome_extension_eth/">[link]</a></span> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/nv25pc/warning_to_users_of_gasnow_chrome_extension_eth/">[comments]</a></span>Kind Regards R