
SelectorsHub Chrome Extension with 400k Users Opens Server-Picked Ad Tabs Without User Consent
securitymalwarechromebrowser-extensionadwareprivacydata-collectioncookiesgambling
The SelectorsHub Chrome extension (ID: ndgimibanhlabgdgjcpbbndiehljcpfh) with approximately 400,000 users pulls advertisements from its own server and automatically opens them in background tabs without user interaction. The extension displays a "community link" popup in its side panel claiming "100% Safe, No Spam, No Malware" before automatically opening server-selected URLs five seconds later, and on install/update it opens tabs without showing the popup. The code contains a hidden "Fix Selector" button that sends data to shubads.testcasehub.net (which now redirects to a gambling site), reads all browser cookies instead of just its own, and pings the developer's server daily despite the store page claiming no data collection.