Trusted Browser Extension Turns Malicious

A popular Chrome extension, Enable Right Click & Copy, has been repurposed by malicious actors to push fake browser update warnings. Originally a tool for restoring website copy functions, the extension was acquired and updated to display urgent alerts for "Critical Update Required." Users who click these deceptive warnings risk downloading dangerous payloads, including credential theft and phishing pages.

This malicious functionality was discovered by security researchers who noted the extension had approximately 70,000 users before its update. Google confirmed it investigated the extension and took action to protect users, delisting it from the Chrome Web Store on August 14. The incident highlights how even trusted extensions can become a security risk after an update.

Users are advised to never download browser updates from pop-up warnings on webpages. Instead, they should manually check for updates within the browser's settings. Regular review of installed extensions and reading recent user reviews before installation are crucial steps to mitigate such threats. Antivirus software and Chrome's enhanced protection can also provide additional layers of security.