Is that Chrome extension filled with malware? • Blisstech Solutions

You’re probably familiar with extensions if you use Google Chrome in your business. These valuable tools can enhance your browsing experience in countless ways, from blocking annoying ads to reducing distractions.

Extensions are popular because they can add so much functionality to your browser. But just as you need to be careful when installing new apps on your phone, you must also be cautious when adding new extensions to your browser. That’s because they come with a risk of malware.

It’s short for malicious software – any software intentionally designed to cause damage to a computer, server, or network. Cybercriminals use malware to steal data, hijack systems, and even empty your bank accounts.

Google Chrome holds about 65% of the browser market share worldwide, making it the most popular browser by far. This popularity makes Chrome a prime target for cybercriminals. While cyber-attacks sometimes exploit vulnerabilities in the browser itself, there’s an easier way to target Chrome users: Through malicious extensions containing malware.

Although Google monitors its Chrome Web Store closely, the risk remains. A recent report claims that 280 million people installed a malware-infected Chrome extension between July 2020 and February 2023. That’s a huge number and highlights the importance of being vigilant.

Surprisingly, many malicious extensions remained available for download on the Chrome Web Store for a long time. On average, malware-filled extensions stayed up for 380 days, while those with vulnerable code were available for about 1,248 days. One particularly notorious extension was downloadable for eight and a half years before removal.

So, how can you protect yourself and your business from these malicious extensions? We recommend these five steps.

  1. External reviews: Since checking ratings and reviews on the Chrome Web Store isn’t always reliable (many malicious extensions don’t have reviews), look for external reviews from trusted tech sites to judge whether an extension is safe.
  2. Permissions: Be cautious if an extension asks for more permissions than it should. If a new extension requests extensive access to your data or system, this could be a red flag.
  3. Security software: Use robust software to catch malware before it can do any harm. This is your last line of defence if you accidentally install a malicious extension.
  4. Necessity: Before installing any new software or browser extensions, consider whether you really need it. Often, you can achieve the same functionality visiting a website.
  5. Trusted sources: Only install extensions from trusted sources or well-known software providers. This significantly reduces the risk of downloading a harmful extension.

Chrome is the most popular browser, which means it will always be a target for cybercriminals. Google’s security team works hard to review every Chrome extension to ensure its safety, but it’s still crucial to be vigilant.

If you’re unsure whether your extensions are safe or you’d like more advice on keeping your business secure, our team can help. Get in touch.

More Content

Don’t Overlook Home Worker Security

Protecting Home Workers and Your Business In the current work-from-home landscape, business security strategies often overlook one crucial aspect: home office security. This oversight creates vulnerabilities that cybercriminals are actively exploiting. With more...
Shady character in a mask sitting by computer screens

A new zero-day vulnerability in Windows

Introduction A new zero-day vulnerability in Windows Search has been discovered which can be exploited to automatically open a malicious search window containing remotely-hosted malware executables. The vulnerability is triggered when a user launches a Word document,...

How to get the most from Microsoft Teams

Is your business struggling with too many emails, lost files, and “final_final_v3” documents? Teams could be a game changer. Yep, it does more than just video calls.  For example, you can also: Chat with your employees Host webinars Share and edit files together Keep...
Woman sitting at her computer with her head in her hands

Protecting your data – Backup and Restore

Protecting your data - Backup and Restore Backing up your business data is critical. What are the different methods of backing up your data? How can you restore lost or corrupted data? These are all important questions for any business to ask themselves. After reading...

AI is making phishing scams more dangerous

AI chatbots have taken the world by storm lately. But for all the fun they offer, criminals have been finding ways to use AI for more sinister purposes.

Data loss? Save yourself a mighty headache

What would you do if all of your business data were lost? You might panic or stare at the screen in disbelief. However, if you're prepared, you'll have a safety net in place in the form of reliable and tested data backup. This means you can quickly restore your data...

Tech Tip: How to create private Teams and channels

Welcome to a new Tuesday tech tip video. This one shows you how to create private Teams and channels in Microsoft Teams. Microsoft Teams is a powerful tool for collaboration, but how do you limit access to what people can see? The answer: Private Teams and private...

Why a business password manager is essential

Still using spreadsheets or sticky notes for your business passwords? It might seem harmless… but it’s one of the biggest risks to your security. Weak or reused passwords are how most hacks happen. And if one login gets leaked, cybercriminals can gain access to...
What’s your business’s view on Return to Office?

What’s your business’s view on Return to Office?

Do you love keeping your employees happy by allowing them to work remotely? Or do you think everyone is more productive in the office? Businesses are divided on this right now… here are some important considerations before you decide what’s best for your team.

Logos for Microsoft 365

The Microsoft New Commerce Experience (NCE) is on the way

Microsoft is introducing what it calls a New Commerce Experience (NCE) in 2022, with changes to licensing terms and pricing for Microsoft 365. This will mean fairly big, and potentially expensive, changes for business customers who have Microsoft 365 licences. The...
Share This
Contact
Love Lane
Cleobury Mortimer
Shropshire DY14 8PE

01299 382 321
[email protected]
Copyright © 2024 Blisstech Solution Ltd
Registered No: 08125391 VAT No : 307 5490 05