Cybersecurity researchers uncovered 152 Chrome extensions disguised as live wallpapers that deliver adware and fake traffic. With 105,000 installs across 38 publisher accounts, here's how to protect yourself.
If you've ever jazzed up your browser with a live wallpaper extension, you might want to check your installed add-ons right now. Cybersecurity researchers just uncovered a massive network of 152 Google Chrome extensions that look like innocent new tab wallpaper tools but actually deliver adware and generate fake traffic.
This isn't a small operation. The extensions were spread across 38 different publisher accounts on the Chrome Web Store, and they've been downloaded over 105,000 times. That's a lot of people who thought they were just getting a pretty background.
### How the Scam Works
These extensions are marketed as live wallpaper add-ons that change your new tab page. Sounds harmless, right? But behind the scenes, they're part of a potentially unwanted program (PUP) family that does some shady stuff. Once installed, they can redirect your searches, inject ads into pages you visit, and even generate fake traffic to boost certain websites.
The whole operation is backed by three main brands: tabplugins[.]com, yowgames[.]com, and chromewallpaper[.]com. Each of these sites acts as a backend for the extensions, helping the bad actors control what happens inside your browser. And because they're spread across so many publisher accounts, it's harder for Google to catch and remove them all at once.
### Why You Should Care
You might be thinking, "It's just a wallpaper, what's the big deal?" Well, here's the thing. Adware like this can slow down your browser, eat up your data, and even compromise your privacy. Some of these extensions can track your browsing habits, collect personal information, or serve you malicious ads that lead to phishing sites. In the worst cases, they can install additional malware on your computer.
- **Performance hit**: Your browser becomes sluggish and takes longer to load pages.
- **Privacy risks**: Your search history and personal data could be sold to third parties.
- **Security threats**: Fake ads might trick you into downloading dangerous software.
### What to Do If You Have One
If you think you might have installed one of these extensions, don't panic. Here's what you can do:
1. Open Chrome and click the three dots in the top-right corner.
2. Go to "More tools" and then "Extensions."
3. Look through your list for anything suspicious, especially wallpaper or new tab extensions you don't remember installing.
4. If you find one, click "Remove" to uninstall it immediately.
5. Consider running a full antivirus scan just to be safe.
It's also a good idea to check your browser's settings to make sure your default search engine hasn't been changed. These extensions often switch it to a sketchy one that shows sponsored results.
### How to Avoid These Traps in the Future
The best defense is a little skepticism. Before you install any browser extension, take a moment to check the developer's reputation. Look for reviews from real users, and be wary of extensions with very few downloads or those that ask for excessive permissions. A wallpaper extension shouldn't need access to your browsing data on all websites.
Stick to well-known developers or extensions that have been around for a while. And remember, if something seems too good to be true—like a free live wallpaper that does way more than expected—it probably is.
### The Bottom Line
This discovery is a reminder that even simple browser add-ons can hide malicious code. The 152 extensions found here are just the tip of the iceberg. As long as there's money in ad fraud and fake traffic, bad actors will keep finding new ways to slip under the radar.
Stay vigilant. Keep your browser clean. And maybe skip the flashy wallpapers for now.
