Attackers prey on inexperienced Google Chrome users

[Matthew DeCarlo]

In a new post today on BitDefender's Malware City blog, the company warns Google Chrome users of malware-laced emails. Attackers are reportedly sending unsolicited messages informing users of a new Chrome extension that helps "better organize your documents" received via email. A seemingly innocent link is provided, and once clicked, users are redirected to a clone of the Google Chrome Extensions page.

At the fake site, folks are instructed to download the "extension," which is actually malware. The blog post notes that some experienced users would undoubtedly notice the rogue application because of its improper file type. Rather than end in .crx, the software suspiciously uses the .exe file extension. To be fair, most seasoned Web-goers probably wouldn't have followed the link to begin with.

BitDefender identifies the threat as Trojan.Agent.20577 and says it modifies the Windows HOSTS file, effectively blocking access to Yahoo and Google. Users are then redirected to fake versions of those sites.

Permalink to story.

https://www.techspot.com/news/38647-attackers-prey-on-inexperienced-google-chrome-users.html

 

[tipstir]

Wow! Thanks for this. I'll keep eye out since I use this browser.

 

[Richy2k9]

hummm... same here! thanks for info, even if i never really follow links from e-mails.

cheers!

 

[z71kris]

I was think who usually follows links from emails unless you know the person who sent it to you, and furthermore how does "the" google get your email address to send you a link to download a file....

 

[tonylukac]

How would I, as a user of Firefox, know that Chrome add ons have a .crx extension? I bet a lot of people will fall for this. Your getting too technical.

 

[Matthew DeCarlo]

How would I, as a user of Firefox, know that Chrome add ons have a .crx extension? I bet a lot of people will fall for this. Your getting too technical.

If you don't use Chrome this wouldn't apply to you at all anyway .