Fake Chrome update scam could infect your computer

Key Points:

• A Chrome extension called Enable Right Click & Copy - Smart Unlock + OCR, originally legitimate, was acquired by a threat actor and updated with malicious features, including aggressive fake Chrome update warnings prompting users to download harmful files; it was removed from the Chrome Web Store on August 14 after being flagged as malicious.
• The fake update scam tricks users by displaying urgent "Critical Update" pop-ups on normal websites, urging downloads of suspicious files like .vbs scripts or .exe installers, whereas Chrome updates automatically through its own interface, which users should verify via Chrome settings.
• This scam exemplifies how trusted browser extensions can become dangerous after updates or ownership changes, as seen in similar cases like QuickLens; users should regularly review recent extension reviews and permissions, not just rely on overall star ratings.
• Antivirus scans may not immediately detect threats from malicious extensions injecting fake warnings, so users must remain cautious of suspicious prompts, avoid downloading updates from web pop-ups, and remove unknown or suspicious extensions promptly.
• To protect against such scams, users should update Chrome only through official settings, maintain updated antivirus software with real-time protection, review and limit extension permissions regularly, enable Chrome's Enhanced Protection, and avoid opening unexpected downloaded files.