Malicious Chrome Update Pop-Ups Target Users via Compromised Extensions

A new malware campaign is targeting users of Google Chrome and other Chromium-based browsers through deceptive pop-ups claiming critical updates are needed. Victims are tricked into downloading harmful .vbs or .exe scripts instead of legitimate updates. The malicious activity is linked to compromised browser extensions, notably 'Enable Right Click & Copy Smart Unlock + OCR,' which has over 70,000 downloads. Users on Brave and Opera have reported similar pop-ups, indicating a broader impact across multiple platforms. Traditional antivirus software often fails to detect these threats, as the browser itself remains uninfected. Users are advised to audit their extensions and avoid clicking on suspicious pop-ups. The situation is ongoing, with no immediate resolution reported.

Key Points: • Malware disguised as Chrome updates is spreading through compromised extensions. • Affected extensions include 'Enable Right Click & Copy Smart Unlock + OCR' with 70,000 downloads. • Users on Chromium-based browsers like Brave and Opera are also experiencing similar threats.