Dear Reader Mode Users,
We regret to inform you that our Reader Mode Chrome extension was recently compromised in a sophisticated phishing attack targeting our developer account. This unauthorized access allowed malicious actors to upload compromised versions of our extension, potentially affecting our users. We deeply regret this situation and want to assure you that we are taking every measure to rectify it and ensure your safety.
What Happened
On December 5, 2024, our developer account was compromised due to a phishing email that mimicked official Chrome Web Store communications. This breach allowed unauthorized parties to upload malicious versions of the Reader Mode extension (1.5.7 and 1.5.9) to the Chrome Web Store. The attack was discovered on December 20, 2024, after Google issued warnings identifying phishing attempts linked to this breach.
Impact on Users
The malicious versions of the extension may have included unauthorized scripts designed to collect user data or perform other harmful actions. If you installed or updated the Reader Mode extension between December 7 and December 20, 2024, your browser may have been affected.
What We’ve Done
Secured Our Account:
-We immediately changed all account credentials and revoked unauthorized access permissions.
-Notifications for suspicious activity were enabled to prevent future incidents.Removed Malicious Code:
-We worked with the Chrome Web Store team to remove compromised versions of the extension.
-A secure and verified update has been released to ensure the integrity of Reader Mode.Enhanced Security Measures:
-Regular audits of our codebase and accounts will be conducted moving forward.
-Multi-factor authentication (MFA) has been enabled across all accounts.
What You Can Do
To ensure your safety:
- Update Your Extension: Verify that you are using the latest secure version of Reader Mode (1.6.2 or later).
- Check for Unauthorized Activity: If you notice any unusual browser behavior, we recommend resetting your browser settings and changing passwords for sensitive accounts.
- Stay Informed: Always verify the authenticity of emails claiming to be from Reader Mode or the Chrome Web Store.
Our Commitment to You
We take this incident very seriously and are committed to regaining your trust. Reader Mode was built to enhance your browsing experience, and your safety is our top priority. We sincerely apologize for the inconvenience and concern this may have caused and appreciate your understanding as we continue to address the situation.
If you have any questions or concerns, please reach out to us at [email protected]. We will provide further updates as necessary and work diligently to prevent future incidents.
Thank you for your continued support and trust.
Sincerely,
Ryzal Yusoff
Founder, Reader Mode
