In our last blog post, we wrote about fake Captcha notifications and how they had fooled a few end users at some of our clients recently.
Unfortunately, there’s another threat that has been working lately so we wanted to share the details about this one, as well: fake browser update notifications.
Cutting right to the chase, a legitimate browser update will never look like this:
Instead, genuine Chrome update notifications will ONLY appear as an alert in the top/right of the browser, in the way you’ve probably seen before – particularly if you’re not the type of user who shuts down your computer each night:
Here at KaufmanIT, we’re dedicated to keeping our clients’ systems secure and running smoothly. As a managed services provider, we’ve seen just about every trick in the book when it comes to cyber threats.
Interestingly, these fake browser updates aren’t particularly new but over the past two weeks, we had to assist a few clients who unfortunately fell victim to this very scam. It happens when victim somehow navigates to a compromised website.
When that happens, up pops the alert telling the user to update his or her browser in order to continue.
Because our threat detection tools functioned properly, our clients’ devices were quarantined to prevent network spread and the results were only mildly time-consuming. For unprotected computers, however, the malware payloads could have had devastating effects.
Still, such intrusions are disruptive, requiring us to remove the malware and restore their devices to a secure state. It’s a stark reminder that even savvy users can be tricked by rather basic tactics when working hurriedly and not thinking about the possibility of online threats coming their way.
The Golden Rule: Browsers Update Themselves
Here’s the essential takeaway: you will NEVER need to manually download anything to update your browser.
- Chrome: Google Chrome automatically updates itself in the background. You can check for updates by going to the three vertical dots (menu) in the top right corner, then “Help,” and finally “About Google Chrome.” If there’s an update, Chrome will download and install it automatically.
- Safari: Safari updates are typically bundled with macOS updates.
- Edge: Microsoft Edge also updates automatically through Windows Update.
- Firefox: Firefox updates itself, and you can manually check for updates in the settings menu.
If you ever see a pop-up or notification on the webpage itself that is prompting you to download a browser update, DO NOT CLICK. Close the window immediately. If you’re unsure, you can always manually check for updates within the browser’s settings or contact your IT specialists (like us!).
Protecting Yourself and Your Business
At KaufmanIT, we understand how vital it is to stay vigilant in the face of evolving cyber threats. We recommend the following:
- Educate Your Team: Ensure everyone in your organization understands that browsers update automatically and to be wary of unexpected update prompts.
- Enable Automatic Updates: Make sure automatic updates are enabled for all browsers and operating systems.
- Hover Before Clicking: If you are unsure of a link, hover your mouse over it (without clicking) to see the actual URL. If the URL looks suspicious, do not click the link.
- Contact Your IT Support: If you encounter a suspicious update prompt or experience any unusual system behavior, contact your IT support team immediately.
Stay safe out there!
