Super Mario data-slurping scare hits the Google Chrome web store

Filed Under: Data loss, Privacy

Data that can be accessedFancy a game of Super Mario for free? Well, be careful - because although you may not have to pay any money for it, you might just be giving away a lot of your private data.

Blogger David Rogers has described how he stumbled across something interesting on the Google's Chrome web store - a playable Super Mario app that - can also access data from all the websites you visit, your browsing history, and your bookmarks.

If you were a fan of Nintendo's dungaree-wearing moustachioed Italian plumber, would you bother to read the small print or just be terribly excited at the prospect of playing "Super Mario World" in your browser?

Super Mario World

Of course, these apps (technically they're browser extensions rather than apps..) aren't endorsed or developed by Nintendo, and by downloading and playing these pale imitations you're only encouraging others to rip-off the hard work of genius game developers from yesteryear.

Nintendo's PR department got in touch with me to emphasise the point:

"Nintendo video games are offered only on Nintendo systems such as the Wii and Nintendo 3DS. Applications on the Apple or Google marketplaces that purport to be Nintendo video games are not legitimate and users who download these applications may expose themselves to spyware or other malicious software. Nintendo actively monitors the unauthorized use of its intellectual property, and will continue to seek removal of any unauthorized content in these marketplaces. In this case, Nintendo worked with Google to have the applications removed."

But more than just supporting copyright thieves, you could find that the lure of a video game classic could be being used to rip off data about you. Think of that next time your eyes glaze over when faced with small print about what an app is really going to do.

It appears that Google has now removed the errant apps from its Chrome Web Store, but one wonders how many other apps and extensions are designed to slurp up more of your data than reasonably expected.

There's no indication that the unauthorised Mario games in the Chrome Web store are intentionally malicious, but they're certainly playing pretty loose in terms of the data they want to access.

There have, of course, been viruses that have posed as Nintendo games in the past.

For instance, on the Windows platform a few years ago we saw the Romario worm, which launched one of the classic Super Mario Bros games, starring the starring the portly Italian plumber.

The worm plays a classic Super Mario Bros game

What would Princess Peach have to say about such shenanigans?

, , ,

5 Responses to Super Mario data-slurping scare hits the Google Chrome web store

  1. @tyw7 says:

    Shameful! A double edge sword: ripping off developers and spying on the users.

  2. @wiggums_ says:

    That isn't a double edged sword at all. A double edged sword has something good, and something bad about it! This has no redeeming qualities!

  3. innergardenpath says:

    Very worrisome. Does the free Angry Birds app from Google Chrome do the same?

  4. Mark Wilson says:

    "genius game developers from yesteryear" - Tehe :)

  5. xpghosted says:

    I have the game (not the worm) that romario is pictured as in my dosbox

    it was made by Mike Wiering who offers a free version since he learned of an unfinished version being sold by someone else as a shareware/demo

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.