WARNING: Google Chrome update scam infects computers with malware

Here's how to protect yourself

WARNING: Google Chrome update scam infects computers with malware

Here's how to protect yourself

Cybersecurity experts warn Google Chrome users of a scam that infects their computers with malware - all through a simple popup window that asks them to download an update. Mac users are safe (for now). The malware currently targets Windows users only. "The compromise starts when a victim innocently navigates to a website that has already been compromised by a hacker. Hackers launch their scam specifically from compromised WordPress web sites," Scott Schober, cybersecurity expert and author of "Hacked Again" tells us Thursday. "The script re-writes the compromised website on the victim's browser, creating an illegible page that is completely fake and prompts the user to download a supposed corrective font." The pop-up alert says "The 'HoeflerText' font wasn't found." If users click on it, executable file "Chrome_Font v7.5.2.exe," a form of malware, will download to their computers. Malware, short for malicious software, can have multiple purposes - disrupting a computer's operations, collecting personal or financial data, displaying unwanted ads or gaining access to entire networks. "This appears extremely convincing, yet is actually malware," Schober explains. "It appears credible as it mimics the Google Chrome browser." How can people protect themselves? Always stay vigilant. "Users need to be aware that there are no legitimate warnings from a Chrome browser promoting a user to download a font," Schober warns. "Never download files from unknown sites, and don't visit unfamiliar domains, as hackers are targeting less known sites with vulnerabilities."

Cybersecurity experts warn Google Chrome users of a scam that infects their computers with malware - all through a simple popup window that asks them to download an update.

Mac users are safe (for now). The malware currently targets Windows users only.

"The compromise starts when a victim innocently navigates to a website that has already been compromised by a hacker. Hackers launch their scam specifically from compromised WordPress web sites," Scott Schober, cybersecurity expert and tells us Thursday. "The script re-writes the compromised website on the victim's browser, creating an illegible page that is completely fake and prompts the user to download a supposed corrective font."

The pop-up alert says "The 'HoeflerText' font wasn't found." If users click on it, executable file "Chrome_Font v7.5.2.exe," a form of malware, will download to their computers.

Malware, short for malicious software, can have multiple purposes - disrupting a computer's operations, collecting personal or financial data, displaying unwanted ads or gaining access to entire networks.

"This appears extremely convincing, yet is actually malware," Schober explains. "It appears credible as it mimics the Google Chrome browser."

How can people protect themselves? Always stay vigilant.

"Users need to be aware that there are no legitimate warnings from a Chrome browser promoting a user to download a font," Schober warns. "Never download files from unknown sites, and don't visit unfamiliar domains, as hackers are targeting less known sites with vulnerabilities."

��vlog