Malware, fake apps, and greedy extensions
The download you allowed is the usual door. How to shrink it, and when to reinstall instead of ‘clean.’
Malware is software that works against you: steal sessions, encrypt files, mine coin, or turn the machine into a relay. On a personal computer it rarely needs a genius exploit. It needs a download you allowed. Fake apps, cracked tools, and greedy browser extensions are the common loaders.
Extensions are programs with a front-row seat
A browser extension can see the page you see. The useful ones block ads or save logins. The rest want “read and change all data on all websites.” That permission is a skeleton key. Review the list twice a year. Remove anything you do not remember installing.
A brand-new extension with five users and a screenshot of a bank page is not a bargain. Stick to well-known names, or do without.
Chrome, Edge, Firefox, and Safari all have a page that lists what is installed. Open it after a cousin “fixed” the computer.
Fake apps and the wrong store
Phones: use the official store, and check the publisher name. A second app with the same icon appears beside the real one during famous scams. Desktop: the vendor’s site, not the first ad. “Download” buttons around a download button are an old joke that still works.
Cracked creative software and game cheats are a reliable way to buy a free problem. The installer has room for extra payloads. If you would not run it at work, do not run it on the laptop that holds your mail.
PDF “converters” and video “downloaders” in the browser are often adware. Use a local tool you chose, or a service you trust.
What infection looks like
New toolbars. A homepage you did not set. The fan on with the lid closed. Pop-ups that will not die. Disabled security tools. Outbound connections you did not start, if you know how to look.
If you suspect it, stop banking on that machine. Change passwords from a phone you believe is clean. Reinstall the OS if you can; cleaning a living malware install is a skill, and half-clean is still dirty.
A smaller attack surface
- Fewer extensions, fewer apps, fewer “optimizers.”
- OS and browser updates on a short leash.
- Standard user account for daily use on a shared PC, admin only when you mean it.
- Backups so ransomware is a rebuild, not a hostage scene.
Malware is not a weather event. It is almost always a program you invited, even if the invitation was a button that lied about its job. Invite less, and keep a copy of your files somewhere else.