YouBoost Chrome Extension Used by 2 Million People Hijacked

The Chrome extension ЮБуст (YouBoost), which has two million users, has been hijacked, according to a statement released by its development team on Telegram. ЮБуст is a tool designed to accelerate YouTube video playback, bypassing throttling issues in Russia. The extension gained widespread popularity due to its ability to improve video quality and load times, particularly in regions with restricted internet access.

The developers announced the breach today, warning users that the extension had been “completely stolen.” While the exact identity of the perpetrators remains unknown, the team suspects the attack may be connected to a recent escalation in restrictions on YouTube and increased attacks on similar services. They assured users that ЮБуст never stored or collected personal data, but they could no longer guarantee the security of the extension following the hijack.

The incident was confirmed through a detailed Telegram post, where the team outlined key concerns and provided urgent instructions to users:

• Users are advised to uninstall ЮБуст immediately from their Chrome browsers and other devices.
• The team encouraged users to report the extension on the Chrome Web Store to help mitigate its misuse by the hijackers.
• The hijackers have allegedly created counterfeit Telegram channels mimicking ЮБуст’s official communications, misleading users with fraudulent updates.

The developers reassured users who subscribed to premium services or purchased the TV version of ЮБуст that their payment data remains secure. The hijackers reportedly did not gain access to financial information or email addresses used for subscriptions. The team pledged to resolve subscription-related issues within 3–4 days, promising refunds or alternative solutions where necessary.

Impact and response

ЮБуст was marketed as a straightforward solution for overcoming YouTube's sluggish performance in Russia, a recurring issue since restrictions on the platform began. The extension claimed to provide seamless video streaming with features such as high-quality playback, unlimited traffic, and full anonymity. The tool’s freemium model included a premium version offering 4K video quality, ad-free browsing, and priority support. Its user-friendly nature and ability to restore unrestricted YouTube access helped ЮБуст amass over two million active installations.

The ЮБуст team is actively working with Google to regain control of the extension. However, they emphasized the importance of user action to curb the potential misuse of the hijacked extension. Reporting and removing the tool from devices are critical steps in minimizing further risks.

To ensure secure communication, the team confirmed that their @uboostrussia Telegram channel is the sole source of verified updates. Users are warned against engaging with any other channels or bots claiming affiliation with ЮБуст.