While browsing, a warning might claim your browser needs a “Critical Update.” It resembles Chrome, creating urgency to click “Update.” This scam is convincing. Aggressive fake update warnings have been linked to a Chrome extension called Enable Right Click & Copy – Smart Unlock + OCR. Initially, this extension helped restore right-click functionality on restricted websites.
Security researchers at Socket discovered the extension was later acquired by a threat actor and updated with harmful code. Approximately 70,000 users might have been exposed. The extension was removed from the Chrome Web Store on Aug. 14 due to its risk potential.
Fake update prompts might appear on regular websites, leading users to download suspicious files instead of updating through Chrome.
Here’s how the fake Chrome update scam operates and how to protect yourself:
Recognizing the Scam
While visiting a site, a message might display “Critical Update Required” or “Update available,” urging you to download content. Yet, Chrome updates occur automatically within the browser. You can manually verify updates by opening Chrome and navigating to More > Help > About Google Chrome.
A request to download a .vbs script or .exe file should alert you. Google’s advice is to avoid such pop-ups and go directly to the official website for updates.
The Dangers of Trusted Extensions
Extensions can turn dangerous after acquisition by malicious entities. Enable Right Click & Copy – Smart Unlock + OCR, for instance, was linked to a campaign involving 19 Chrome and Edge extensions capable of delivering malicious payloads like credential theft and fake update alerts. Previously trusted extensions, such as QuickLens, also fell into this trap after ownership changes.
Evaluating Extension Ratings
The 4.7-star rating of Enable Right Click & Copy – Smart Unlock + OCR remained high due to past positive reviews, even as warning signs emerged in new reviews. Users began reporting fake update alerts, suggesting caution.
Antivirus Software Limitations
Even a clean antivirus scan doesn’t guarantee safety from browser warnings. An extension might inject these alerts, posing a threat despite appearing clean. Google’s Safe Browsing assists in monitoring threats, but user vigilance is key.
A warning branded with Chrome in a different browser indicates a scam.
Verifying Chrome Updates
To check for necessary updates, open Chrome, click the three-dot menu, choose Help, and select About Google Chrome. Chrome will indicate if updates are needed or if a relaunch is possible.
Removing Problematic Extensions
Review installed extensions. You can disable or remove them completely. To manage them:
- Open Chrome.
- Click the three-dot menu.
- Select Extensions > Manage extensions.
Identify suspicious extensions by reviewing their permissions.
Protecting Against Fake Update Scams
Adopt these habits for security:
- Never update Chrome from pop-ups: Use Chrome’s internal update mechanism.
- Use robust antivirus software: Look for real-time protection and keep it updated.
- Regularly review extensions: Analyze their permissions and remove unrecognized ones.
- Read recent reviews: Look beyond overall ratings to spot changes.
- Enable Enhanced Protection: Go to Chrome > Settings > Privacy and security > Security > Enhanced protection.
- Delete unexplained files: If downloaded accidentally, remove and do a security scan.
- Utilize data removal services: Reduce exposure to scams with less personal information online.
Taking Action If Scammed
If you opened a suspicious file, treat the system as compromised:
- Disconnect from sensitive accounts.
- Run a full antivirus scan.
- Change passwords from a secure device.
- Use multifactor authentication where possible.
Persistent Fake Update Appearances
If warnings persist after extension removal, consider browser hijacking. Disable remaining extensions sequentially and restart the browser. Perform another antivirus scan if necessary. Avoid using passwords or entering financial information until resolved.
Awareness and caution with browser extensions can reduce exposure to fake update scams. Rely on official updates through Chrome’s settings rather than prompts from random websites.