Fake Chrome update scam could infect your computer

You are browsing the web when a warning suddenly takes over the page. It says your browser needs a "Critical Update" before you can continue. It looks like Chrome. The message feels urgent. So, clicking Update may seem like the safest thing you can do. That is exactly what makes this fake Chrome update scam so convincing.

Recent reports linked aggressive fake browser update warnings to a Chrome extension called Enable Right Click & Copy - Smart Unlock + OCR. The extension was originally developed as a legitimate tool for restoring right-click and copying features on websites that block them. However, security researchers at Socket now say the extension was later acquired by a threat actor and updated with malicious functionality. It had around 70,000 users when that malicious functionality appeared, although researchers caution that this does not mean every user received the malicious version. The extension was delisted from the Chrome Web Store on Aug. 14 after being flagged as potentially malicious.

FAKE WINDOWS UPDATE INSTALLS HIDDEN MALWARE

The bigger lesson goes beyond one extension. Something you installed months ago and trusted every day can change after an update. Here's how this fake Chrome update scam works, how to spot the warning signs and what you can do to protect your browser and computer.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Our free CyberGuy LIVE class, Protect Your Money From Todays Biggest Threats, has ended, but you can still watch the full replay and download our financial protection checklist. Kurt "CyberGuy" Knutsson walks you through five simple ways to help defend yourself against AI scams, fraud, identity theft and financial hacks. Youll learn how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed.

Get the free replay and checklist now at CyberGuyLive.com.

The warning can appear while you are visiting an otherwise normal website. You may see language such as "Critical Update Required" or "Update available." The alert then pushes you to download something before you continue browsing.

However, Chrome normally handles its updates through the browser itself. usually updates automatically in the background. You can also check manually by opening Chrome and going to More > Help > About Google Chrome.

A webpage asking you to download a .vbs script or an unfamiliar .exe file to update Chrome should immediately raise your suspicion. Google specifically advises users to avoid suspicious pop-ups asking them to install updates. Instead, Google recommends going directly to the program or its official website.

Here is the part that can catch careful people off guard. You may have installed an extension when it had thousands of users, strong reviews and no obvious signs of trouble. You use it for months. Then the extension changes.

Google confirmed to CyberGuy that it looked into Enable Right Click & Copy - Smart Unlock + OCR. "We've investigated the extension and taken action to protect our users," a Google spokesperson told CyberGuy.

New research published by Socket on Aug. 27 shows the threat went beyond fake update warnings. Researchers linked the extension to a larger campaign involving 19 Chrome and Edge extensions capable of delivering malicious payloads. Those capabilities included credential theft, , injected phish