Google Chrome Malware Updates
I. Targeted Industries
- Higher Education
- Financial Services
- Independent Companies
- General Public
III. Background Information
- Phishing Awareness Training
Users should be educated about new kinds of phishing scams as well as those used in the past. Recommended link: https://www.us-cert.gov/ncas/tips/ST04-014
- Safe Browsing Techniques
Users should be educated on safe browsing techniques to identify malicious content. Recommended link: https://www.us-cert.gov/ncas/tips/ST07-001
- Support Channel
Users should contact support directly if anything seems suspicious about the services provided.
V. Indicators of Compromise (IOCs)
Some email systems block files. You can visit the link below to download the identified IOC’s. https://usf.box.com/s/m33ypp45u1xo1gsuqltxokhtaan8dtie
(1) Davies, Hannah. “Cybercriminals Have Disguised Malware as Important Google Chrome Updates.” Trusted Reviews, March 25, 2020. https://www.trustedreviews.com/news/dodgy-chrome-update-trying-to-infectcomputers-through-news-sites-4019068.
(2) Gatlan, Sergiu. “Malware Disguised as Google Updates Pushed via Hacked News Sites.” BleepingComputer. BleepingComputer.com, March 25, 2020. https://www.bleepingcomputer.com/news/security/malware-disguised-as-googleupdates-pushed-via-hacked-news-sites/.
(3) Wagenseil, Paul. “Fake Google Chrome Update Contains Nasty Malware: Avoid This Right Now.” Tom’s Guide. Tom’s Guide, March 26, 2020. https://www.tomsguide.com/news/fake-chrome-update-malware.
(4) Winder, Davey. “Hackers Trick Thousands Into Downloading Dangerous ‘Google Chrome Update’.” Forbes. Forbes Magazine, March 27, 2020. https://www.forbes.com/sites/daveywinder/2020/03/26/warning-hackers-trickthousands-into-downloading-dangerous-google-chrome-update/#70ef9e0678e9.