The bogus plugins of the game, which were available on the Chrome Web Store up until a few hours ago, asked for permissions that a game would never really need. According to Barracuda the permissions being asked for were quite significant like accessing a user’s data on all websites.
Once installed the plugin would insert extra ads into some of the most popular websites on the web like Yahoo, MSN, eBay, MySpace, Disney among others. The plugins “request a significant permissions, [like] access your data on all websites,'” Barracuda noted in a blog post. “At this step, you should stop installing this plugin. Playing a web-based game should have nothing to do with your other browser tabs at all”, it added.
According to Barracuda, a total of scammers managed to fool quite a few people and as many as 82,593 people had installed the bogus Bad Piggies plugins as of October 2. “If you have already installed, uninstall them immediately and change your passwords on other websites if possible,” Barracuda noted.
Rovio managed to top the US iOS App store charts within just 3 hours of launch of Bad Piggies after its September 27 release.