"As it seems from the description, we are dealing with some sort of spyware in the shell of browser plugin. As usual such plugins can't be labelled as classic malware – most likely it's the additional toolbars or scripts for changing the default search engine," Legezo said.
The add-on has been removed from the Google's Web Store. The company is tightening its policy regarding plugins, according to the malware analyst.
"But as far as the enormous and constantly growing number of browser plugins is concerned, no company will even try to blacklist the herds of unwanted plugins."
The situation gets even worse since no antivirus can block software like this, according to the malware analyst. But there is an efficient and time-saving solution to this particular problem – whitelisting and blacklisting applications.
I had Webpage Screenshot on all my computers. Apparently it was stealing my data.
— Eric Chapman (@Idle_Threat) 8 апреля 2015
"The first one blocks every program not on the list of permitted apps, while the second one permits all the software except the blacklisted programs," Legezo explained.
Strange glitch with @googlechrome where all my extensions have been removed but @Skype. I'm not complaining as it removed all spyware…
— McRae4Ever (@McRae4Ever) 9 апреля 2015
Don't download an extension named "Webpage Screenshot" on Google Chrome. It's stealing data and sending it to the US agencies. #Retweet!
— JoePaleto (@joepaleto) 9 апреля 2015
