In Chrome add-on , which has more than a million installations and is designed to create screenshots of web pages, malicious activity. Users of the add-on using the UBlock Origin blocker have noticed that ads continue to be shown to them, despite the explicit presence of rules for blocking them.
Users began to complain to the author of UBlock Origin that he intentionally skips Google ads, but the analysis of the situation that the source of this anomaly is the βScreenshot & Screen Capture Eliteβ add-on, which substitutes its ad units on Google search results pages. The ad substitution code was loaded from the address "67.205.139.234", which was also used in the add-on to organize a screenshot sharing service. The advertisement was placed through the "fly-analytics.com" system.
Source: opennet.ru