'We would like to apologise for this significant incident. Mega.nz has acknowledged the attack and said a clean version of the extension - v3.39.5 - was submitted to the Chrome Web Store four hours after the breach. The Firefox version of the extension was not affected in the incident. SerHack said over 1.6 million users were likely affected, Bleeping Computer reports. However, users have been advised to review the Chrome browser's Extensions section and make sure it has been disabled. Google's team has since removed the extension from the official Chrome Web Store and disabled the extension for existing users. The malicious v3.39.4 version of the extension was reportedly uploaded on the Chrome Web Store on September 4 at 2:30PM UTC. The collected data would then be relayed to a server hosted in Ukraine. In cases where cryptocurrency was involved, it could also steal privacy keys to access users' funds. The extension could record usernames, passwords and other session data required for the attackers to log into victims' accounts. Once installed, the extension was capable of monitoring for specific login submissions on multiple websites including Amazon, Google, Microsoft, GitHub, the MyEtherWallet and MyMonero wallet services and the cryptocurrency trading platform IDEX. Italian security researcher and contributor to the Monero project SerHack first spotted the MEGA Chrome extension's malicious behavior and took to Twitter to warn users that the 3.39.4 version of extension had been hacked. The official Mega.nz Chrome extension has been compromised to steal login credentials and private cryptocurrency keys, security researchers have discovered. Google's team has since removed the hijacked extension from the official Chrome Web Store.Microsoft, GitHub, the MyEtherWallet and MyMonero wallet services, and others. Login credentials for websites such as Amazon, Google,

The malicious extension was capable of stealing.

Mega.nz megasync analysis