How to Protect Yourself from Fake Chrome Update Scams
While browsing, you might encounter a warning that your browser needs a ‘Critical Update.’ It resembles a Chrome update, urging you to click quickly. This urgency is a tactic used by scam artists. Recent reports linked fake update warnings to a Chrome extension called Enable Right Click & Copy – Smart Unlock + OCR. Originally a legitimate tool for restoring right-click functionalities, the extension was commandeered by a threat actor who embedded malicious features.
According to security researchers at Socket, this malicious functionality appeared in an extension once used by about 70,000 people. However, this does not mean every user received the harmful version. The extension was removed from the Chrome Web Store on August 14.
Identifying the Fake Chrome Update Scam
The scam prompts may appear on regular websites, urging downloads of unfamiliar files, not through Chrome updates. Normally, Chrome updates automatically. To check manually, open Chrome and navigate to More > Help > About Google Chrome.
Be wary of web pages asking you to download .vbs scripts or unfamiliar files to update Chrome. Google advises against following pop-up instructions for updates. Instead, go directly to the program’s official website.
Why Extensions May Become Dangerous
Previously safe extensions can become risky after updates. Google investigated and acted against Enable Right Click & Copy – Smart Unlock + OCR. The scandal reached beyond updates, as researchers exposed a broader campaign involving other extensions delivering malicious payloads, including credential theft and fake updates.
A similar situation occurred with QuickLens – Search Screen with Google Lens, which changed hands before its update contained malicious features. Despite previously holding a Featured badge, it was later removed due to harmful capabilities.
The Role of Browser Extensions
Currently, many extensions that started as beneficial tools have become spyware. One campaign affected 4.3 million users after deploying harmful updates. A high overall rating once signified reliability but beware that future updates might carry risks.
Warning Signs of Malicious Behavior
Fake Chrome updates linked to once-trusted extensions aim to push users to download dangerous files. Browser hijacking can also present itself as malicious pop-ups.
Protecting Your Browser
- Never update from web pop-ups. Go to Chrome > Help > About Google Chrome to check for updates directly.
- Use antivirus software. Seek real-time protection to identify threats promptly. Keep the software updated to avoid exposure to new threats.
- Review browser extensions. Regularly check what is installed, disable unrecognized extensions, and check access permissions.
- Read recent reviews. Before installation, examine the most current user reviews for signs of abrupt changes.
- Use Enhanced Protection. Enable through Chrome > Settings > Privacy & Security > Security > Enhanced protection for deeper checks against threats.
- Delete unfamiliar downloads. If you mistakenly download suspicious files, delete them and run a security scan.
- Use data removal services. While it won’t remove malware, such services can reduce the personal information available to scammers.
Overall, vigilance when handling browser updates and extensions is vital. Keeping browsers and devices secure requires proactive steps to ward off potential threats. Regular updates and reviews ensure your digital safety.