While browsing online, you might encounter a warning that insists your browser needs a ‘Critical Update’ to continue. This warning seems urgent, implying a necessary update for Google Chrome. However, this is a scam tactic designed to trick users into downloading harmful software.
How the Scam Operates
These fake update alerts can appear on legitimate websites, directing users to download unfamiliar files instead of using Chrome’s built-in update system. Typically, Chrome updates happen quietly in the background, or you can manually check for updates by navigating to More > Help > About Google Chrome in your browser.
A webpage prompting you to download suspicious files should immediately raise alarms. Google advises avoiding pop-ups that urge you to install updates. Instead, go directly to the browser’s official site for updates.
The Case of the Malicious Extension
The scam gained traction through a Chrome extension named Enable Right Click & Copy – Smart Unlock + OCR. Initially a legitimate tool, this extension was manipulated into spreading malicious software. Despite being removed from the Chrome Web Store, its history highlights how an extension can become dangerous without apparent warning.
Security researchers found that the extension was part of a larger campaign delivering harmful payloads, which included credential theft and phishing attempts. Such risks mean you should always be cautious about the extensions you use.
Navigating the Security Risks
To protect yourself from these scams, adopt the following practices:
- Avoid updating Chrome from webpage alerts: Always verify update needs through Chrome’s settings directly.
- Employ reliable antivirus software: Opt for software offering real-time protection to catch threats as they occur.
- Monitor browser extensions regularly: Review and remove extensions you no longer need or recognize.
- Examine recent reviews of extensions: Look for any negative feedback that may indicate malicious updates.
- Be wary of unexpected file downloads: Do not open suspicious files. Conduct a security scan if you accidentally download one.
Dealing with Compromised Extensions
If you suspect a problematic extension, disable it and assess its permissions. Researchers urge removal of extensions like Enable Right Click & Copy – Smart Unlock + OCR due to their potential to harm. Run a security scan and change passwords on sensitive accounts for increased safety.
Staying Secure
Prevention is critical. Never succumb to fraudulent update prompts from random web pages. Regularly check your browser and extensions for discrepancies, and maintain strong cybersecurity software. If you face issues from a supposed update, revisit all browser settings and ensure your security software is updated.