Unit 42

Unit 42

@unit42_intel · Twitter ·

We identified 10 Chrome #extensions impersonating popular brands to lure users to install and then use #scareware techniques to show "Browser Not Supported" leading to affiliate #fraud of cost-per-install legitimate software. Details at https://bit.ly/4x2EPRo

The image shows a code snippet related to a scareware modal trigger. It highlights two techniques used to redirect users to a controlled domain, leading to an affiliate download link. Red arrows and text annotations explain how certain functions force a modal to become visible and redirect links to an external site. The image shows three windows related to browser support notifications. The first two windows display the message "Browser Not Supported" with a prompt to download Opera. The third window thanks users for installing an extension and suggests downloading Opera. Red arrows and text point out "two different techniques used to force users to perform affiliate download.