Kotaradio Fake Chrome Update Scam Infects Users via Malicious Extension
Article Content
- •Fake Chrome update warnings are linked to a compromised extension with 70,000 users.
- •Users are tricked into downloading malware through urgent update prompts.
- •Google recommends checking for updates directly through the browser, not via pop-ups.
A fake Chrome update scam has emerged, tricking users into downloading malware through deceptive warnings. The scam is linked to a Chrome extension called Enable Right Click & Copy – Smart Unlock + OCR, which was compromised by a threat actor after being legitimate. This extension had approximately 70,000 users before it was delisted from the Chrome Web Store on August 14, 2026. Users are prompted with urgent messages claiming a 'Critical Update' is required, leading them to download harmful files instead of legitimate updates. Google advises users to avoid suspicious pop-ups and to check for updates directly through the browser. The incident highlights the risks associated with browser extensions that can change functionality after updates. Security experts recommend vigilance and awareness of the signs of such scams.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…