Is that Chrome extension filled with malware?

Is that Chrome extension filled with malware?

If you use Google Chrome for your business, you’re familiar with extensions. These handy tools can improve your browsing experience in many ways, from blocking ads to minimizing distractions.

Extensions are quite popular because they can add a lot of functionality to your browser. However, just as you need to be careful when installing new apps on your phone, you should also be cautious when adding new extensions to your browser because they pose a risk of malware.

Malware, short for malicious software, refers to any software intentionally designed to cause harm to a computer, server, or network. Cyber criminals use malware to steal data, take control of systems, and even drain bank accounts.

Google Chrome holds about 65% of the global browser market share, making it the most popular browser by a large margin. This popularity makes Chrome a prime target for cyber criminals. While cyber-attacks may sometimes exploit vulnerabilities in the browser itself, a simpler way to target Chrome users is through malicious extensions containing malware.

Even though Google closely monitors its Chrome Web Store, the risk still exists. A recent report claims that between July 2020 and February 2023, 280 million people installed a Chrome extension infected with malware. This is a significant number and underscores the importance of remaining vigilant.

Surprisingly, many malicious extensions remained available for download on the Chrome Web Store for extended periods. On average, extensions filled with malware were available for 380 days, while those with vulnerable code were accessible for about 1,248 days. One particularly notorious extension was downloadable for eight and a half years before being removed.

How can you protect yourself

So, how can you protect yourself and your business from these malicious extensions? Here are five steps we recommend:

1. External reviews: Since checking ratings and reviews on the Chrome Web Store is not always reliable, seek external reviews from trusted tech sites to gauge an extension’s safety.
2. Permissions: Be cautious if an extension requests more permissions than necessary. Extensive access to your data or system by a new extension may be a red flag.
3. Security software: Utilize robust software to identify malware before it can cause harm. This is your last line of defence if you accidentally install a malicious extension.
4. Necessity: Before installing new software or browser extensions, consider if you truly need it. Often, you can accomplish the same functionality by visiting a website.
5. Trusted sources: Only install extensions from reputable sources or well-known software providers. This significantly reduces the risk of downloading a harmful extension.

Chrome is the most popular browser, which means it will always be a target for cyber criminals. Google’s security team works hard to review every Chrome extension to ensure their safety, but it’s still crucial to remain vigilant.

If you’re unsure whether your extensions are safe or if you need further advice to keep your business secure, our team can help. Get in touch.