Remove script.js
article thumbnail

Trojanized Tor Browser targets shoppers of Darknet black marketplaces

Security Affairs

” Crooks also modified the HTTPS Everywhere add-on included with the browser to add a content script ( script.js ) that will be executed on load in the context of every webpage. . “Therefore, the attackers can modify any add-on and it will be loaded by the browser without any complaint about it failing its digital signature check.”