The “update your browser” warning that is really malware

How it works

Attackers break into ordinary websites, often small business sites or blogs, and add code that shows some visitors a fake message. It looks like it comes from your browser, with the right logo and colors, and says you need an update to view the page.

The “update” is a download, often a file ending in .exe, .msi, .zip or .js. Running it installs malware: programs that steal passwords, give attackers remote access or open the door to ransomware.

How real updates work

• Browsers update themselves in the background, through their own settings. You may be asked to restart the browser. You are never asked to download a file from a web page.
• On work computers, IT usually handles browser updates.
• You can check any time in the browser’s settings, under About, without visiting a website.

What to do

• Close the tab if a website tells you to update your browser.
• Do not open the downloaded file. If you already did, disconnect from the network and contact IT.
• Delete the file from your Downloads folder if it saved.
• Report the website to IT if it is one your business uses.