It's not about Linux even, and not about viruses as such, but about bad people.Apparently, the show was over, and the one described here is just a
series of random events .
I open this morning in VKontakte in Chrome, and then every second to me in the lower left corner (just like a new personal message), the same message from a certain “Google Administration” with a “request” to update my browser begins to fall:

The link led to
http://chrome-update.net/ , which asked to enter a phone number (they sent the code in SMS and asked to enter this code), and the JS-ka was located on the site
http://www.abrakadabra2012.ru / vkontakte , which is also redirected somewhere, etc. etc.
')
The culprit of this JS-ki was found quickly: the extension for Vkontakte "
Vkontakte Tools " -
https://chrome.google.com/webstore/detail/efiplaenbpdemncgfglodeehhnfilgaa . There is a green check mark next to the name - it seems to be checked, and it seems that this extension has a lot of users.
The author is
iShift (a person who is at least not friendly with the Russian language).
Several rhetorical questions arise, for example:
- How could Google allow this to happen in their webstore?
- Why did this same developer introduce malicious code into his extension?
So now download extensions for your favorite browser.
PS Please refrain from commenting which browser is cooler, which VKontakte is bad, and which idiots are these users of such extensions. Thank.
UPD 1 :
The first mention was noticed as early as the 19th:
http://my-chrome.ru/2012/04/ostorozhno-rasshireniya-dlya-vkontakte-mogut-perenapravit-vas-na-vredonosnyj-sajt/UPD 2 :
Developer found:
iShift &
shifttstasAnd already
apologized .
UPD 3 :
And already told
an incredible story . He is probably not to blame, thank you all. Time will tell.