That Chrome Update Pop-Up May Actually Be Malware

If you're seeing pop-ups successful Chrome pushing you to download an update successful bid to proceed browsing aliases debar losing entree to your data, you whitethorn beryllium a target for malware. As Android Authority reports, compromised browser extensions look to beryllium distributing malicious scripts disguised arsenic "critical" information updates.

Hackers are utilizing malicious extensions to dispersed clone information updates

Some Google Chrome users person noticed fierce pop-ups alerting them to required updates and prompting them to download the latest type of the browser. One type states that "access to websites is temporarily blocked" until the update is installed. The different is moreover much urgent, stating that Chrome will extremity moving aft a definite day and require a "complete reinstallation," successful which users whitethorn suffer entree to bookmarks, history, and saved passwords. If you click "Update Chrome," it'll download a suspicious .vbs aliases .exe book to your device.

The rumor seems to beryllium traceable to a fistful of extensions, which are fetching malicious scripts and serving clone prompts wrong the browser. In Chrome, 1 specified add-on is “Enable Right Click & Copy Smart Unlock + OCR," which has a "Featured" tag and 70,000 downloads (though different inferior devices whitethorn beryllium culprits arsenic well). Users connected Brave and Opera, some Chromium browsers, person reported identical pop-ups. For the former, the compromised extension, called "QuickLens – Search Screen pinch Google Lens," was removed from the Web Store.

You May Also Like

While immoderate malicious add-ons do find their measurement onto the Chrome Web Store, it's not uncommon for threat actors to weaponize different benign extensions aft gaining level support and personification trust. In campaigns identified crossed Chrome, Microsoft Edge, and Firefox, hackers person built extensions posing arsenic crypto wallet and productivity apps, fto them run legitimately to rack up downloads and reviews, and past pushed updates that turned them into malware.

This is an effective strategy because malicious extensions tin evade discovery by antivirus package and strategy scans. The browser itself isn't compromised—rather, the add-on is pulling malicious scripts from a distant server, and the threat isn't picked up until you really download and execute them connected your device.

Don't download information updates from pop-ups

If you commencement seeing pop-ups for captious information updates successful your browser, don't click connected them, and don't transcript aliases instal thing from them. The alerts successful this run person reasonably convincing Chrome branding and elements for illustration a copyright and links to a privateness argumentation and position of service, but beware the consciousness of urgency. You tin cheque whether your browser really needs to beryllium updated successful the settings paper (on Chrome, click the 3 vertical dots aliases spell to Settings > About Chrome).

You should besides regularly cheque the extensions you've added to your browser and delete immoderate that aren't essential. Click the extensions icon > Manage Extensions to spot what's progressive and reappraisal permissions granted. If you're still getting sketchy pop-ups, effort removing inferior apps to spot if you tin place the culprit.