Browsing the internet when suddenly receiving an urgent message about a ‘Critical Update’ required for your Chrome browser can seem genuine. However, this is part of a convincing scam involving a Chrome extension once believed to be safe.
The Deceptive Chrome Update Scam
Recent reports have connected aggressive fake browser update alerts to a Chrome extension named Enable Right Click & Copy – Smart Unlock + OCR. Initially, this tool aimed to restore blocked right-click and copy functions on websites. Security researchers from Socket discovered that a threat actor later acquired the extension and embedded malicious capabilities. Despite having 70,000 users at one point, not every user received the harmful version.
Google removed the extension from its store on Aug. 14 after identifying it as potentially dangerous. Fake update prompts appeared on regular websites, urging users to download unfamiliar files rather than update through Chrome.
Understanding the Fake Chrome Update Scam
Fake update warnings may appear on legitimate websites with messages like ‘Critical Update Required.’ Normally, Chrome updates are handled internally, automatically done in the background by Google. You can check for updates manually through Chrome’s menu: More > Help > About Google Chrome.
Warnings asking you to download scripts or unknown files should raise flags. Google advises steering clear of random pop-ups for updates, recommending only official sites for downloads.
Shifts in Extension Safety
Trusted extensions may become hazardous after an update. The extension mentioned was investigated and flagged by Google after malicious traits were discovered.
Research indicates a larger campaign involving 19 similar extensions enabling credential theft, crypto wallet drainage, and phishing. The extension’s history shows even those with strong ratings can harbor risks post-update.
Star Ratings and User Reviews
Enable Right Click & Copy – Smart Unlock + OCR held an average rating near 4.7 stars when reports of the fake update arose. This reflects the impact of previous positive reviews. Examine recent feedback for alerts about suspicious behavior before installing an extension.
Monitoring Extensions
A Reddit user traced fake update prompts to this extension despite antivirus scans finding no issues. Google’s Safe Browsing system helps detect threats, but remaining cautious about random alerts is crucial.
Broader Browser Risks
Fake Chrome update alerts can also occur on other browsers like Brave or Opera. These prompts often stem from suspicious extensions, as many use similar systems.
Confirming Chrome Updates
To confirm a Chrome update:
- Open Chrome
- Click Menu > Help > About Google Chrome
Updates are handled directly within Chrome, reducing confusion from phony alerts.
Handling Extensions Safely
If you have installed suspicious extensions:
- Remove them immediately
- Run a security scan
- Change sensitive passwords
Protecting Against Fake Update Scams
Avoid updating Chrome from pop-ups. Use strong antivirus software with real-time protection. Regularly review browser extensions:
- Open Chrome, go to Menu > Extensions > Manage extensions
- Check permissions and limit access
Analyze extension reviews prior to installation. Enable Chrome’s Enhanced Protection for heightened security.
Dealing With Unexpected Files
If a fake update downloaded files:
- Delete without opening
- Empty the Recycle Bin
- Run a full security scan
Scammer Tactics and Data Removal
Consider using a data removal service to limit personal information exposure online, reducing the effectiveness of personalized phishing.
Further Precautions
If a downloaded file was executed, disconnect from critical accounts. Run full antivirus scans, following professional recommendations. Use another secure device for sensitive account updates.
Persisting Issues
If fake prompts continue post-extension removal:
- Disable and test other extensions
- Verify browser startup settings
- Conduct comprehensive antivirus scans
Persistent browser redirections may indicate deeper issues requiring additional cleanup.
Key Takeaways
This scam reflects dangers with browser extensions that evolve maliciously over time. Safeguard by periodically revisiting installed extensions and confirming update authenticity through trusted channels.
Leave a Reply