Skip to main content

Google cracks down on malware with a new extensions policy

google has updated its chrome extensions policy to combat malware chome web store
Denys Prykhodov/Shutterstock
It’s official: Google intends to boost its efforts to fight off malware, and it will do so through its Web browser, Chrome.

The search engine giant announced on May 13 that it will now require Windows-based extensions to be installed from its Web store, according to a post on the official Chrome blog. And Mac product users will not be immune to Google’s changes, either. The company noted that it will force Mac operators to only download from its Web store in the coming months.

“The extension platform unlocks powerful features that can help users get the most out of Chrome,” wrote Jake Leichtling, Extensions platform product manager at Google, in the blog post. “However, it is crucial that our users stay safe from the reaches of malicious software developers.”

Google’s goal isn’t to annoy its browser users, but rather prevent them from unknowingly downloading malicious files. On the bright side, the company noted that it will continue to allow inline installations, according to Ars Technica. Inline installations involve third-party sites that link to an extension hosted by Google.

In his post, Leichtling mentioned a policy that was rolled out in 2014, which prevented Windows users from downloading Chrome extensions outside of the Chrome Web Store. As a result of that change, the company saw a 75 percent drop in user support requests relating to extensions. Following these positive results, Google made its official decision to apply the policy to all Windows and iOS users.

“Extending this protection is one more step to ensure that users of Chrome can enjoy all the web has to offer without the need to worry as they browse,” Leichtling continued.

In April 2015, Google announced the release of Chrome 42 into the stable channel. Notably, the new version had 45 security fixes, many of which were resolved with assistance from external researchers. This edition also revealed a move away from traditional plugins, such as Java and Silverlight.

Editors' Recommendations

Krystle Vermes
Former Digital Trends Contributor
Krystle Vermes is a professional writer, blogger and podcaster with a background in both online and print journalism. Her…
Hackers are using this incredibly sneaky trick to hide malware
A hacker typing on an Apple MacBook laptop, which shows code on its screen.

One of the most important things you can do to protect your online security is install one of the best password managers, but a recent cyberattack proves that you have to be careful even when doing that. Thanks to some sneaky malware hidden in Google Ads, you could end up with viruses riddling your PC.

The issue affects popular password manager KeePass -- or rather, it attempts to impersonate KeePass by using misleading Google Ads. First spotted by Malwarebytes, the nefarious link appears at the top of search results, meaning you’ll likely see it before the legitimate websites that follow beneath it.

Read more
This dangerous new Mac malware steals your credit card info
A hacker typing on an Apple MacBook laptop while holding a phone. Both devices show code on their screens.

People like to think that Apple’s Macs are more or less invulnerable to the assorted viruses and trojans that afflict Windows PCs, but that’s far from the truth. That’s just been aptly demonstrated by the emergence of a new malware strain that attempts to steal all of your passwords, credit card data, and more.

The discovery was made by security firm SentinelOne, which named the malware MetaStealer. According to SentinelOne, MetaStealer has the potential to trick you into giving away vital information that could cause a huge amount of damage, and it has a nefarious way of getting what it wants.

Read more
Malware is spreading through Google Bard ads — here’s how to avoid them
A person holds a phone with the Google logo and word 'Bard' on the screen. In the background is a Google Bard logo.

As the public adjusts to trusting artificial intelligence, there also brews a perfect environment for hackers to trap internet users into downloading malware.

The latest target is the Google Bard chatbot, which is being used as a decoy for those online to unknowingly click ads that are infected with nefarious code. The ads are styled as if they are promoting Google Bard, making them seem safe. However, once clicked on, users will be directed to a malware-ridden webpage instead of an official Google page.

Read more