That Chome Extension... is it Malware?

Whether you know about them or not, most Chrome users have something called "extensions" installed. I know this because it's something we tend to cleanup when we're servicing both Macs and PCs.

Chrome extensions are kind of like addon software that you can install inside your Chrome browser, to extend features. And they are incredibly popular. For example, I have a Chrome extension to help me block advertisements and another to help me with passwords (to name a few).

There are LOTS of Chrome Extensions. According to ZDNet, there are approximately 188,620 Chrome extensions.

But are all Chrome Extensions safe?

Anyone can make Chrome extensions, including cyber criminals. They will take a useful idea and incorporate some kind of spyware or malware into it. Not cool.

This kind of malware can steal data, hijack systems, damage your computer, server, network, or even empty your bank accounts. Yikes.

Why is Chrome such a popular target? Because it's used by most computer users (approx 65% of them).

Isn't Google making sure that malware doesn't end up in Chrome Extentions. Yes. But clearly, it's not good enough. A recent report claims 280 million people installed a malware-infected Chrome extension between July 202 and February 2023. That's huge!

I saw a report where Chrome didn't remove a very popular malware-infected extension... until 8 years later. Many stay up for over a year.

What does this all mean? You need to be careful about what Chrome extensions you install into your browser. Here are a few steps that we recommend to help protect yourself and your business:

1. Look at the reviews. Not just from the chrome extension itself, but also look at reviews from other websites too.
2. Does the extension come from a trusted source? Take a look at the author. Are they reputable? Do you recognize the company behind it?
3. Do you really need the extension? Even safe extensions can slow down your browser experience.
4. What kind of permissions is the extension asking for? Be cautious if the extension appears to be asking for sensitive data.
5. Are you using a good anti-virus or security software? This can often be your last line of defense for an extension that is looking to harm your computer or network.

Me? I try to make sure I'm using the absolute minimum amount of Chrome extensions. This not only helps speed, but also helps to make sure I'm not as exposed as I could be.

Stay vigilant. Of course, if you're unsure about what Chrome extensions are or how to find them... or if you need advice about keeping your business secure, our team can help. Or send me a message!

Originally published at geek3.com on July 24, 2024