Google Analytics Event Permutation

Question

since the 9th of Sep some events (about 0,01 %) and their dimensions were unreadable by permutation. Like the event \"VideoView\" becomes to \"eiVwoediV\".

Does anybody

Answer 1

We caught it! We luckily had a known customer who created such requests and we phoned him!

We nailed it down to one Firefox plugin:

https://addons.mozilla.org/de/firefox/addon/cliqz/

We could reproduce the described behaviour by installing the plugin. The strange thing is, that the add-on has not been modified recently, regarding to addon.mozilla.org.

The malicious version we installed is version 1.0.37, and can be installed from https://s3.amazonaws.com/cdncliqz/update/Cliqz.1.0.37.xpi It seems, they tested some anti-tracker functionality. Probably they uploaded some new rules on 2015-09-09.

Thank you for four days of searching.