Residents across the United States have been warned about a deceptive browser‑update scam that mimics a Google Chrome “Critical Update” prompt. The scam is tied to a Chrome extension called Enable Right Click & Copy – Smart Unlock + OCR, which originally helped users restore right‑click functionality on sites that block it.
How the scam works
After being acquired by an unknown threat actor, the extension was updated with malicious code. When users see a pop‑up that looks like an official Chrome update request, clicking the button can download a script or executable that installs hidden malware on the computer. The warning may appear on any website, even those that seem harmless.
What Google says
Google confirmed that it investigated the extension and removed it from the Chrome Web Store on August 14. The company advises users that Chrome updates are handled automatically in the background and can be checked manually by opening Chrome, clicking the three‑dot menu, selecting Help > About Google Chrome. Any page asking you to download a .vbs script or unfamiliar .exe file should be treated as suspicious.
Broader threat landscape
Security researchers at Socket reported that the compromised extension is part of a larger campaign involving 19 Chrome and Edge extensions capable of credential theft, cryptocurrency wallet draining, phishing page injection, and fake update lures. Similar patterns have been observed with other extensions, such as QuickLens, which also received a malicious update after changing ownership.
Protecting yourself
To stay safe, users should:
- Verify Chrome updates only through the browser’s built‑in update check.
- Review installed extensions, disable or remove any that are unfamiliar or have recent negative reviews.
- Run a full security scan if you suspect a malicious download.
- Change passwords for any accounts accessed while the extension was installed, using a trusted device.
Google’s Safe Browsing system can flag known threats, but new malicious extensions may slip through before being detected. Vigilance and regular review of browser extensions remain essential defenses against these scams.
Original reporting: Fox News (HLL/CB) — read the source article.
