Fake YouTube Page Targets Chrome Users

A malicious campaign uses fake YouTube landing pages (facebook-java.com / getjava.net) to lure Google Chrome users into installing a malicious Chrome Web Store extension that disables access to Settings/Tools, overrides chrome:// pages, injects JavaScript into every visited page (via goog.gl redirects to profonixcoder.com endpoints), and automatically shares links via the victim's Facebook account; several injected scripts are hosted behind Google URL shortener links and some payloads were already down or removed.