

You should not blame Evernote firm for these ads – it has nothing to do with with the legitimate Evernote app. These ads can lead you to highly insecure Internet sites, especially those that promote spyware and malware programs. While the Evernote virus does not show any symptoms of the infection, there is a small hint that shows discrepancies – when visiting Chrome://extensions page, click on the “visit website” button next to the Evernote Web extension – it will bring you nowhere.Įvernote virus extension loads a content script into every Internet website that the victim visits, and as a result, the user receives a virtual layer of various web advertisements in a variety of different forms – banners, pop-up and pop-under ads, in-text links and more.Įvernote virus is a term used to describe a malicious version of a popular app that can be obtained on Google web store Thanks to the inserted JavaScript code, as well as the tricks that Multiplug PUP uses, the fake extension receives a name “Evernote Web,” which can trick users into believing the app is legitimate. Upon the infiltration, Multiplug PUP drops the following files into the host browser extension folder: This PUP manages to insert the deceptive browser extension to Comodo Dragon, Torch, and Google Chrome browsers. Reportedly, Evernote virus, which is a fake version of the official app, s distributed with the help of Multiplug (a potentially unwanted program), which is digitally signed by Sergei Ivanovich Drozdov, who claims to be an open source developer. It allows hackers to hijack the Chrome Web browser and harvest sensitive user data like cookies, login credentials, and other private information.Įvernote virus dropped by a potentially unwanted program Multiplug Evernote Web virus uses the same name as the real Chrome extension, so it can be very hard to identify whether you are infected or not.īesides the fake Evernote version, security researchers also recently uncovered a security vulnerability inside the Evernote Web Clipper Extension for Chrome under the code name CVE-2019-12592. It turns out, scammers are using the name of this legitimate company to trick computer users into thinking that they are using a browser extension, while in reality, the malicious version is being installed.

The service is designed initially to take notes and organize to-do tasks and has over 1.5 million downloads on Google Play.

What is Evernote virus? Evernote virus is a set of cyber infections and scams that try impersonate a legitimate applicationĮvernote virus is a fake version of a legitimate Evernote application - it allows bad actors to insert malicious ads into websites that the infected users visitĮvernote virus, which is also known as Evernote Web virus, is a term used for cyber infections that can get into user devices by pretending to be an official Evernote app, published by a trustworthy company.
