Google is strongly advising Chrome users to update their browsers immediately due to the discovery of a harmful attack that allows hackers to gain control over computers.
Cybercriminals are resorting to deceptive pop-up windows or websites to exploit innocent individuals and obtain their personal information, as cautioned by the tech giant.
An important update has been released to address a vulnerability in your servers that could be exploited by a zero-day attack.
The name comes from the fact that a perpetrator discovered a vulnerability before the manufacturer did, giving them no time to fix the problem because the server had already been compromised.
To access the update, simply navigate to the ‘Settings’ section in Google’s Chrome browser.
According to Google, a flaw in previous versions of Chrome could have been exploited by a remote attacker through a specially crafted HTML page. However, Google did not provide details about the specific nature of the flaw.
When an imitation HTML page pops up on the screen, it may resemble a typical website. However, upon clicking on it, a malicious individual could exploit remote access to take control of the user’s computer.
The HTML page may also appear as a pop-up, prompting the user to download what seems like the latest anti-virus software or browser update. However, instead of providing the intended software, it installs malicious software that enables unauthorized individuals to steal the user’s personal information.
It is recommended by Google that users regularly update their browsers to the most recent version in order to keep all security measures current.
With these updates, you no longer need to worry about paying for antivirus software. The new version of Chrome takes care of all the pre-existing vulnerabilities by patching them up.
To update Chrome, users can easily navigate to the browser’s menu and access the settings option.
You can find the option to click ‘About Chrome’ on the left side, which will check for updates and download them.
It is highly recommended by Google to keep auto-updates enabled in order to ensure that important security fixes and exciting new features are automatically added as soon as they become available.
According to an analysis by Mandiant and Google’s Threat Analysis Group, there has been a significant increase in zero-day attacks in 2023. The number of such attacks has risen by 50 percent compared to the previous year.
According to Google, hackers have now extended their reach to third-party sites and libraries in order to maximize their impact. These sites, which offer multiple products, have become prime targets for hackers to exploit the security vulnerabilities in Chrome.
A Google spokesperson informed Techradar that they observed this pattern among various threat actors, who were motivated by different reasons. These actors targeted vulnerabilities in products or components that allowed them to gain widespread access to multiple chosen targets.
Users were cautioned by security experts last year to avoid downloading a new version of Chrome on their browser due to the potential presence of harmful software.
According to the analysis, in 2023, around 41 percent of attacks were carried out through espionage efforts, with another 41 percent being conducted by commercial surveillance vendors. The remaining 17 percent were financially motivated.
According to Google, a significant number of attacks originated from actors in Russia, North Korea, Belarus, and China. Additionally, they identified 12 zero-day vulnerabilities that were attributed to government-backed actors from the People’s Republic of China (PRC).
The analysis highlighted that the actor displayed a keen focus on gathering information related to politics and strategic matters that are of interest to the PRC government. Their targets included various global governments and organizations operating in high priority industries.
