Fb sues two Chrome extension makers for scraping user info

Fb sues two Chrome extension makers for scraping user info

facebook

Image by Alex Haney

Fb has filed a lawsuit lately in opposition to two companies for constructing and distributing malicious browser extensions that scraped user info without authorization from the Fb and Instagram web sites.

Named within the lawsuit are BrandTotal Ltd., an Israeli-based entirely entirely company with a Delaware subsidiary, and Unimania Inc., integrated in Delaware.

The two companies are within the lend a hand of UpVoice and Ads Feed, two Chrome extensions out there on the legitimate Chrome Web Retailer since September and November 2019, the build they racked up extra than 5,000 and 10,000 installs, respectively.

“BrandTotal enticed users to set up the UpVoice extension from the Google Chrome Retailer by providing funds in replace for installs, within the maintain of online reward cards, and claiming that the users who installed the extension became ‘panelists . . . [who] impression the promoting and marketing and marketing selections and mark solutions of multi-billion dollars (sic) companies’,” Fb talked about in court docket documents filed lately.

upvoice-website.png

UpVoice web page

“Equally, Unimania promoted its Ads Feed extension on the Google Chrome Retailer by claiming that the users became ‘a panel member of an elite community neighborhood that impacts the promoting and marketing selections of multi-billion greenback companies!’,” Fb added.

But Fb claims that irrespective of their descriptions, both extensions had been malicious and designed to trouble public and interior most info from users’ online accounts.

According to court docket documents, Fb claims the UpVoice extension scraped info from user profiles at Fb, Instagram, Amazon, Twitter, LinkedIn, Pinterest, and YouTube.

Equally, Ads Feed unexcited info from users having access to their Fb, Instagram, Amazon, Twitter, and YouTube profiles, respectively.

Scraped info frequently incorporated user profile info (name, user ID, gender, date of delivery, relationship web page, and set info), ads and marketing and marketing metrics (name of the advertiser, record and text of the advertisement, and user interaction and reaction metrics), and user Advert Preferences (user advertisement hobby info) — none of which the corporate became approved to possess.

The Menlo Park-based entirely entirely social media massive claims that info illegally received by the 2 extensions has been re-packaged and equipped as “marketing and marketing and marketing intelligence” by BrandTotal’s web page.

Fb claims the 2 companies are the identical

Fb says both extensions extinct nearly identical code to trouble info from users and despatched the knowledge lend a hand to the identical a long way off servers. If truth be told, Fb believes the 2 companies are the identical.

“Defendants shared trendy workers and agents,” Fb explained in its complaint.

“As an illustration, BrandTotal’s Chief Product Officer and Total Supervisor (Ex. 5), created Fb accounts within the name of Unimania and the Ads Feed extension. BrandTotal’s Chief Know-how Officer and co-founder (Ex. 5) furthermore administered Unimania accounts on Fb.”

Fb is now attempting for to construct a cease to this schem. The social network has asked a ponder to field a permanent injunction in opposition to both companies to cease them from having access to the Fb and Instagram web sites, block them from growing extra extensions, and has asked for compensatory damages in accordance with the 2 companies’ earlier profits.

Both extensions are unexcited out there for download

But, despite the intensive info scraping behavior detected by Fb, even in opposition to Google-owned companies and products, the 2 extensions are unexcited out there on the Chrome Web Retailer.

Fb talked about it tried a lot of times to possess them taken down, nonetheless Google has no longer responded to its requests.

Unimania, sooner than growing the Ads Feed extension, became beforehand smitten by one other scandal in 2018 when AdGuard came upon four of the corporate’s Chrome extensions scraping Fb user info.


Since early 2019, Fb’s compatible department has been submitting court docket cases in opposition to loads of third-events that possess been abusing its platform. Previous court docket cases encompass: 

March 2019 – Fb sues two Ukrainian browser extension makers (Gleb Sluchevsky and Andrey Gorbachov) for allegedly scraping user info.

August 2019 – Fb sues LionMobi and JediMobi, two Android app builders on allegations of marketing and marketing click on fraud.

October 2019 – Fb sues Israeli surveillance provider NSO Community for growing and selling a WhatsApp zero-day that became extinct in Might additionally 2019 to attack attorneys, journalists, human rights activists, political dissidents, diplomats, and authorities officials.

December 2019 – Fb sued ILikeAd and two Chinese language nationals for the usage of Fb adverts to trick users into downloading malware. 

February 2020 – Fb sued OneAudience, an SDK maker that secretly unexcited info on Fb users.

March 2020 – Fb sued Namecheap, one amongst the finest enviornment name registrars on the online, to unmask hackers who registered malicious domains by its carrier.

April 2020 – Fb sued LeadCloak for providing instrument to cover fraudulent adverts linked to COVID-19, pharmaceuticals, fat burners, and extra.

June 2020 –  Fb sued to unmask and engage over 12 domains containing Fb producers and extinct to dawdle-off Fb users.

June 2020 – Fb sued MGP25 Cyberint Products and companies, a company that operated a web-based web page that equipped Instagram likes and comments.

June 2020 – Fb sued the owner of Massroot8.com, a web-based web page that stole Fb users’ passwords.

August 2020 – Fb sued MobiBurn, the maker of an marketing and marketing SDK accused of scraping user info.

August 2020 – Fb sues the owner of Nakrutka, a web-based web page that equipped Instagram likes, comments, and followers.

Be taught More

Leave a Reply

Your email address will not be published. Required fields are marked *