Chrome pop-ups

Posted by CaptainObviousII@reddit | sysadmin | View on Reddit | 3 comments

We have an enterprise AV solution, Windows firewall, EDR protection and do not allow installation of additional software / apps / extensions without approval. All this and we still have end users getting their browsers hijacked. What gives?

Reply to Post

3 Comments

[-]

alarmologist@reddit

Is it just malicious ads? I've seen malicious ads even in the Windows news feed thing. Use an ad blocker like u/Sweetyn said. Clear the cache and they are gone.

[-]

ThirstyOne@reddit

Your users may be allowing websites to send [notifications](https://support.google.com/chrome/answer/3220216?hl=en&co=GENIE.Platform%3DAndroid), this lets chrome publish them to the windows Notification Center. Many sites sell their advertising space to malware distributors. This is typically characterized by the notifications being in the lower right hand corner of the screen. Apply a list of allowed sites (mail, calendar, etc.) for notifications and disable all others in Google Admin and/or via GPO

[-]

Sweetyn@reddit

Deploy a good ad blocking extension to all users, it will make a massive difference. Adding an internet safety component to your cyber training can also help.