'As with other threats, actors are exploiting the human factor and are tricking users into loading the malware themselves, this time via selective injects into websites that create the appearance of problems along with the offer of fake solutions.Google Chrome virus scan usually runs automatically if you download a file or if it suspects some malicious activity. “Because actors are finding it more difficult (and therefore less profitable) to achieve conversions (i.e., malware installations) via exploit kit, they are turning to new strategies,' researchers said. The recent 'font' attack on Chrome users actually has to rely on users clicking on the download/update button, which means there's no guarantee that the exploit kit will make the perpetrator money. The latest attack strategy is, however, different since it first filters out its targets and then launches the attack.

The group redirected users from infected sites to a malicious payload that was used in exploit kits. The EITest infection chain used in this latest Chrome malware campaign has been previously used to compromise a large number of websites, using known vulnerabilities in WordPress or Joomla. Once infected, the computer will start browsing in the background on its own.

The pages are rendered unreadable by storing all the data between HTML tags in an array and iterating over them to replace them with “�”, which is not a proper ISO character as a result, the replacement character � will be displayed instead. Note that IE users who meet other criteria will experience a more classical EK attack. The infection is straightforward: if the victim meets the criteria - targeted country, correct User-Agent (Chrome on Windows) and proper referer - the script is inserted in the page and rewrites the compromised website on a potential victim's browser to make the page unreadable, creating a fake issue for the user to resolve.

Google chrome install malware