Google will require most extensions for its Chrome browser to be installed from its Web Store. This incentive will stop users from inadvertently installing malicious extensions. Google has gradually been changing its policy around extensions to prevent abuse. The change caused a 75 percent drop in requests from customers asking how to uninstall unwanted extensions. It did not apply to the Windows developer channel, but hackers are now using that in order to install extensions. Google automatically analyzes extensions for malicious behaviour. Most are then published, although some may be held for manual review. It bans extensions that interfere with advertisements, for example, or are spammy. For development purposes, Google will still allow extensions to be installed locally, as well as forced installs using a group policy for enterprises.
Mauritian Computer Emergency Response Team (CERT-MU)
National Computer Board
7th Floor, Stratton Court
La Poudriere Street