started · updated
Easy Auto Refresh Chrome extension accused of data harvesting
The Easy Auto Refresh Chrome extension, which has over 500,000 downloads, has been identified as transmitting user data to a third-party domain, domainedatasales.com.
Technical analysis reveals that the extension sends base64 encoded strings containing sensitive information, including visited URLs, referrers, and the user's device location, to a server hosted on DigitalOcean. While the extension's terms of use claim to use anonymous data capture for analysis and sharing with business partners, reports indicate the data being transmitted is not truly anonymous. The data collection occurs as long as the extension is enabled in the browser, regardless of whether the tool is actively being used.
Entities
Chrome · DigitalOcean · Easy Auto Refresh · domainedatasales.com