Specifically, upon installing ‘Internet Download Manager,’ users are now asked to install an executable from the puupnewsapp website, and additionally download a “Windows patch” ZIP file:hxxps://hxxps://The ‘idman638build25.exe’ executable appears to be a valid, signed version of the legitimate Tonec Internet Download Manager.Īlso Read: Cybersecurity for SMEs: What employees should know The instructions provided by the knock-off extension are even more perplexing-why does one need to download and install multiple programs after installing the extension? Installation steps for the extension prompt users to further install programs (BleepingComputer) But, the authentic Chrome extension provided by the company is called ‘IDM Integration Module.’įurther, Tonec’s FAQ specifically warns, “Please note that all IDM extensions that can be found in Google Store are fake and should not be used.”īy contrast, the counterfeit ‘Internet Download Manager’ Chrome extension seems to be maintained by a website called “ Puupnewsapp” that claims “it increases your download speed up to 500%” making it a “super software” for downloading games, movies, music, and “large files in minutes.” Sounds promising. Tonec does offer Internet Download Manager extensions for Firefox and Chrome.

There does exist a legitimate Windows program called Internet Download Manager, published by software company Tonec. Chrome extension Internet Download Manager live on Chrome Web Store (BleepingComputer) The ‘Internet Download Manager’ browser extension installed by more than 200,000 users to date doesn’t seem all that innocent. Dodgy Chrome extension installed by 200,000+ usersĪ concered BleepingComputer reader reached out to us on seeing a Chrome add-on “running malicious sites by impersonating famous software.”Īlso Read: Browser in the browser attacks: Why you should watch outĪnd their concern seems valid. The extension has been sitting on the Chrome Web Store since at least June 2019, according to the earliest reviews posted by users.Īlthough the extension may install a known and legitimate download manager program, BleepingComputer observed unwanted behavior exhibited by the extension-such as opening links to spammy sites, changing the default browser search engine, and further hounding the user with pop-ups asking them to download more “patches” and unwanted programs. Google Chrome extension ‘Internet Download Manager’ installed by more than 200,000 users is adware. Fake Chrome Extension ‘Internet Download Manager’ has 200,000 Installs

Ninja internet download manager