Toughest in the competition, but not invulnerable: a Chrome-targeting trojan is now making the rounds.
The Chrome attack poses as an e-mail invite to download a Chrome extension aimed at helping impose order on e-mail.
The link in the e-mail is a redirect, of course, one that lands the user on a fake Chrome extensions page, from which malware is downloaded that cuts the user off from Google (and Yahoo).
Instead of being able to reach Google or Yahoo proper, users are further redirected to phony, malware-laden sites.
Tipoff to the scam is the initial download's use of a .exe extension, whereas legit Chrome extensions are .crx
The fact that the crooks are making an effort to target Chrome indicates that they perceive critical -- and thus profitable -- mass building for the browser.
Which makes it critical that if any of your users are running Chrome, make sure they're aware of the attack and its characteristics.
Make sure as well that they know that Chrome, while plenty tough, isn't impervious to attacks.
