Security Chrome Extension 'Live HTTP Headers' Hijacked !

eva2000 · Nov 11, 2016

For anyone using Chrome or equivalent browser extensions must read "Live HTTP Headers" extension hijacked : chrome

You might have seen this reddit post

Well, I've just discovered that "Live HTTP Headers" is now injecting <script> tags into webpages, only visible via the inspector:

<script src="//s3.eu-central-1.amazonaws.com/forton/live_http_headers.js"></script>

Which is the same site that Tab Manager tries to pull its cool.pro ad injection Javascript.

Too bad, it was a handy extension, but best to get rid of it now.
Click to expand...

Sunka · Nov 11, 2016

Yep.
I found that last week. In chrome console there was an error for this error s3.eu-central-1.amazonaws.com/forton/live_http_headers.js.
Googled for it and found same post you quoted.
Chrome extension deleted. Pity, because it was handfull

deltahf · Nov 16, 2016

Wow. I used to use it, but deleted it a while ago. I tend to only leave Chrome extensions running while I need them, and can always reinstall later.

As mentioned, it's a real shame.

Log in / Register

Forums

Want to subscribe to topics you're interested in?

Security Chrome Extension 'Live HTTP Headers' Hijacked !

eva2000 Administrator Staff Member

Sunka Active Member

deltahf Active Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

Security Chrome Extension 'Live HTTP Headers' Hijacked !

eva2000 Administrator Staff Member

Sunka Active Member

deltahf Active Member

.