Harmful chrome extensions can significantly enhance the functionality of the world’s most popular browser.
However, each one you install also introduces a potential security risk. So, what steps should you take if you accidentally download a malicious Chrome extension?
How to Check If You’re Using Malicious Chrome Extensions
Regrettably, there isn’t a single test available to detect malicious Chrome extensions. Instead, you need to monitor all the extensions you’ve installed and be vigilant for any suspicious activity.
Here’s a brief overview of the key aspects to watch for:
Page redirects: When you enter a URL, you’re automatically taken to another website.
Unexpected surge in advertisements: Notably, a sudden rise in pop-up ads on websites where you typically wouldn’t anticipate them.
Scareware: Pop-up alerts claiming your device is infected, urging you to click through for a removal solution
Sluggish browser performance: Your web browser is noticeably slower than usual when performing routine tasks, such as loading web pages.
Reports on Malicious Extensions: Monitor news articles about harmful Chrome extensions and remove any suspicious ones from your browser.
Extension listing: Chrome is generally swift in removing suspicious extensions from its web store after they are reported. Therefore, it’s a good idea to regularly review the listing pages for any extensions you use.
Review extensions: Additionally, monitor reviews for all the extensions you use to check for any reports of malicious activity.
Keep track of the latest update dates to ensure developers continue to support your extensions.
Downloading many extensions can be time-consuming when following all the necessary steps. However, as we will discuss later, it’s advisable to use the minimal number of extensions possible; this approach not only minimizes security risks but also simplifies identifying any malicious ones.
To uninstall browser extensions in Chrome, launch a new browser window on your computer and click the three dots located at the top right corner of the address bar. From the dropdown menu that appears, select Extensions > Manage Extensions to view all installed extensions.
In this section, you can see all your Chrome extensions in one location and review details such as permissions by selecting the Details button.
You can turn extensions on or off by using the toggle switch located at the bottom-right corner of each tab. This feature is useful if you suspect that one of your extensions might be malicious and want to isolate them for identification purposes.
To uninstall an extension from your Chrome browser, just click “Remove,” and the extension will be completely deleted.
Having identified and removed any harmful Chrome extensions, it’s important to take precautionary measures to safeguard your device.
1. Upgrade Google Chrome
Ensure that you are using the latest version of Google Chrome. Regular updates typically include important security enhancements and bug fixes, so it’s wise to update your browser frequently or enable automatic updates.
To accomplish this, open Chrome on your computer and click the three-dot icon located to the right of the address bar.
Next, navigate to Settings > About Chrome > Automatically update Chrome for all users. This enables the browser to automatically update whenever you close and reopen it.
Remember that if you keep the Chrome app open for long periods, you’ll need to manually install updates. You’ll be notified when an update is available because Chrome will display an “Update” button next to the three-dot icon.
The button turns green when a new update is released, shifts to orange after four days, and changes to red after one week. This system serves as a reminder for you to run updates promptly in order to access the latest security enhancements, bug fixes, and any new features.
2. Conduct a Safety Check in Chrome
With the latest version of Chrome now installed, it’s a good idea to perform a safety check. To do this in Chrome, click on the three-dot icon located next to the address bar and navigate through Settings > Privacy and security.
On the following page, locate the section labeled “Safety Check,” and initiate the scan by clicking on the “Check Now” button.
The check takes just a few seconds, and the results will appear on-screen once it’s complete.
It will scan for any harmful extensions and verify that you’re using the latest version of Chrome, have safe browsing enabled, and check if you have any compromised passwords.
3. Run an antivirus scan on your device
After eliminating it’s important to ensure your device remains secure. Selecting the right antivirus software tailored to your needs can be daunting. Remember that security threats are becoming more frequent and severe, making reliable antivirus software an essential defense against potential attacks.
4. Download Extensions Exclusively from the Chrome Web Store
Always download Chrome extensions from the official Chrome Web Store. Avoid downloading extensions from third-party websites, even if they are offered directly by the developer.
Reliable providers should consistently direct users to the extension page on the Chrome Web Store.
If a website attempts to install an extension directly onto your browser, bypassing the Chrome Web Store, remove it right away.
5. Control Permissions for Chrome Extensions
Even when using legitimate extensions, you can examine and control the permissions of Chrome extensions to ensure they aren’t performing any actions that make you uncomfortable.
When you download a new extension from the Chrome Web Store, you’ll receive a pop-up detailing its required permissions. Review these attentively and ensure that the purpose of the extension warrants such requests—particularly if it mentions: “Read and change all your data on all websites.”
You can review the permissions of existing extensions by navigating to the extension management page and selecting Details.
Navigate to the Permissions section where you can review the necessary permissions for the extension’s proper functionality. Just below this area, you’ll have options to adjust Site access settings: choose from On all sites, On specific sites, or On click.
Make it a habit to routinely review the permissions of your extensions and watch for any unexpected changes. For instance, if an extension suddenly requests access to your browser history without justification, think about uninstalling it.
Things to Consider Before Downloading New Chrome Extensions
To reduce the risk of installing harmful Chrome extensions, take these steps prior to adding one:
Download exclusively from the Chrome Web Store: As previously mentioned, ensure that you only download Chrome extensions from the official Chrome Web Store.
Minimize extension use: While you can’t be certain an extension is entirely safe, reducing risk involves using only the essentials.
Download extensions solely from trusted developers: Minimize the risk of installing malicious Chrome extensions by choosing those created by reputable sources, such as official add-ons from Google and major software companies.
Developers conducting research: If it’s essential to use an extension from a developer you’re unfamiliar with, make sure to investigate their background thoroughly.
Review feedback: Before downloading any extension, make sure to read through the reviews, particularly if you’re unfamiliar with the developer.
Review Permissions: Previously, we demonstrated how the Chrome Web Store presents extension permissions before prompting you to confirm the download—review these permissions carefully and ensure they are appropriate for the extension.
Downloading extensions always involves some level of risk, but you can significantly minimize it by following these steps.
Ensure the Safety of Your Next Chrome Extension
Google usually acts swiftly to remove malicious extensions from its web store once they are reported. However, if you’ve already downloaded a problematic extension, this won’t be much consolation. Therefore, it’s important to research thoroughly before installing any new extensions to ensure their legitimacy.
