Shockingly, many malicious extensions stayed available for a long time. On average, malware-filled extensions were up for 380 days, while those with vulnerable code remained for about 1,248 days. One particularly harmful extension was downloadable for 8 and a half years before being removed.

So, how can you protect yourself and your business from these dangerous extensions? Here are five steps we recommend:

1. Check External Reviews: Ratings and reviews on the Chrome Web Store aren’t always reliable, as many malicious extensions have few reviews. Look for reviews from trusted tech sites to determine if an extension is safe.
2. Review Permissions: Be cautious if an extension asks for more permissions than necessary. If it requests extensive access to your data or system, this could be a red flag.
3. Use Security Software: Robust security software can catch malware before it does any harm. This is your last line of defense if you accidentally install a malicious extension.
4. Assess Necessity: Before installing any new software or browser extensions, consider whether you really need it. Often, you can achieve the same functionality by visiting a website.
5. Stick to Trusted Sources: Only install extensions from trusted sources or well-known software providers. This significantly reduces the risk of downloading harmful extensions.

Because Chrome is the most popular browser, it will always be a target for cybercriminals. Google’s security team works hard to review every Chrome extension to ensure they are safe, but it’s still crucial to stay vigilant.

If you’re unsure whether your extensions are safe or if you need more advice on keeping your business secure, our team can help. Get in touch today.