Scammers are using fake Google Chrome update notifications to trick users into installing malicious browser extensions. These pop-ups mimic legitimate Chrome alerts, appearing when you browse the web, and prompt you to click "Update" or "Install."
Once you click, the malware installs an extension that hijacks your browser without your knowledge. These extensions can steal passwords, intercept banking credentials, monitor your browsing activity, and inject ads into websites you visit. Some variants redirect you to phishing sites designed to harvest personal information.
Here's how to protect yourself. First, ignore pop-up update notifications that appear while browsing. Google Chrome updates automatically in the background. Any update prompt that interrupts your browsing is almost certainly malicious. Second, check your installed extensions regularly. Open Chrome, click the three-dot menu, select "Extensions," then "Manage Extensions." Delete anything unfamiliar or suspicious.
Third, enable Chrome's Enhanced Safe Browsing. Go to Settings, then "Privacy and security," and toggle on "Enhanced Safe Browsing" for stronger protection against malware and phishing.
Fourth, avoid clicking links in unexpected notifications. If Chrome needs updating, you'll see a colored menu icon in the top-right corner. That's the real notification.
If you've already fallen victim, remove the malicious extension immediately through the Extensions page, then change your passwords for critical accounts like email and banking. Run a full antivirus scan on your computer afterward.
This scam works because it exploits user trust in familiar brands. Chrome users expect legitimate updates, making the deception effective. The extensions themselves are hard to detect because they operate quietly in the background.
Stay vigilant when browsing, especially on lesser-known websites. Keep your browser updated through official channels only, and never trust pop-ups that interrupt your workflow.