Chrome Extension 'Volume Booster' Secretly Activated Affiliate Tracking SDK for 2M Users
PrivacyTrackingExtensionsMalware
The Chrome extension 'Volume Booster' updated across three versions (1.0.2 to 1.0.4), initially gaining unused <all_urls> host permissions in 1.0.2. In version 1.0.3, it added the webRequest permission, followed by the integration of the 'Give Freely / Wildfire' affiliate tracking SDK in 1.0.4 without requesting new permissions. This allowed the SDK to be deployed to 2 million weekly users without triggering a re-consent prompt.