Browser hijackers can be a real nuisance due to the fact that it’s the kind of thing that could end up redirecting users to ad-filled sites in order to generate click-through revenue. ChromeLoader is one of the most prominent browser hijackers, but researchers recently revealed that it’s actually much more dangerous than the average hijacker due to its use of PowerShell.

ChromeLoader has recently increased in terms of active use, and the sophisticated threat it poses is something that regular Internet users are unaware of. With all that said and now out of the way, it’s important to note that this hijacker can use PowerShell to spread various forms of malware, including ransomware and spyware, as well as steal session data from browsers, which could be a huge problem. risk to user privacy.

Many users see their browser infected with ChromeLoader when they try to download pirated games or software in the form of ISO files, which makes Windows users particularly vulnerable. Despite the fact that this is the case, Mac users are not entirely safe from this ubiquitous browser hijacker either, with all things considered and taken into account. ChromeLoader is not designed for a specific operating system, so while it is certainly easier to infect Windows users, Mac users are also susceptible if they download a DMG file which is the image file for Mac OS .

ChromeLoader inserts itself into your browser with PowerShell, which also gives it extensive access and permissions to various other parts of your computer. It turns into an extension that users might not even notice, and it will implement its sinister code in the background without the knowledge of its victims.

It has yet to be used with a higher-level threat, but it’s unclear when a malicious actor might realize its true potential and attempt to exploit it. Chrome users on Mac OS and Windows should check their extensions and avoid downloading pirated files.

H/T: RedCanary.

Read next: Telegram’s blogging platform is attacked by phishing actors