Realistically most extensions open many links in the background. Even a simple adblocker will “open links” or URLs in the background to perform updates of lists etc.
The difference here is the malware was installed by the user after accepting a user agreement that probably covers network use…
Also they hijack the affiliation when the users interact with the extension and not with the website where the link for the product is.
I doubt honestly this will be a good angle to attack Honey.
IMO the fact that users are told that the best coupon will be used even though it’s demonstrably not true is a much more provable issue.
Especially since the extension opens a tab for an instant makes me think they didn’t really try to be super super sneaky.
Realistically most extensions open many links in the background. Even a simple adblocker will “open links” or URLs in the background to perform updates of lists etc.
The difference here is the malware was installed by the user after accepting a user agreement that probably covers network use…
Also they hijack the affiliation when the users interact with the extension and not with the website where the link for the product is.
I doubt honestly this will be a good angle to attack Honey.
IMO the fact that users are told that the best coupon will be used even though it’s demonstrably not true is a much more provable issue.
Especially since the extension opens a tab for an instant makes me think they didn’t really try to be super super sneaky.