Chromebook Security

[JHZR2]

My 12yo got a Chromebook, and we keep it up to date, but I’m sure it’s far less secure than the locked down Apple stuff we use.

Today this popped up. I got a photo from my wife.

So I see this as I pop out for lunch. I have no idea what the icon in the upper left associated with, and it this implies a hack on Google or what.

Or maybe it’s just a scam email that popped up when received and we are all overthinking it. I don’t know what makes a pop-up like that pop up in chrome.

Im not really familiar with chrome os. I’ve locked everything down via the family app.

But looking for recommendations on locking this down further, cleaning/preventing any issues, and perhaps more important, locking down my home network so anyone can’t get in through this. We don’t leave computers and whatnot connected and on all the time, and can easily move data via tethered phones vs wifi for as long as needed. But I want to be safe.

Any recommendations would be helpful. It’s hard not being home to intercept the scenario directly.

Thanks!

 

[rszappa1]

Might be spam... A Chromebook will update with Google for about 8 to 10 years then it will not update with the latest Google update..

 

[TheOilWizard]

Looks like a pop up.

I think @rszappa1 is right about that. ChromeOS only provides support for X number of years.. I doubt your device is fully patched anymore.

I would factory reset the device and consider replacing it. If you continue to use it, just remember it's an insecure device.

 

[wwillson]

My 12yo got a Chromebook, and we keep it up to date, but I’m sure it’s far less secure than the locked down Apple stuff we use.

You can search the make/model to see if it still gets updates from Google. It almost certainly doesn't which means the Chromebook is highly suspect of being hacked.

Look at the domain name in the pop up. What do you think the chance is of a safe message reminding you of some issues with links to click are going to come from India?

 

[rszappa1]

Looks like a pop up.

I think @rszappa1 is right about that. ChromeOS only provides support for X number of years.. I doubt your device is fully patched anymore.

I would factory reset the device and consider replacing it. If you continue to use it, just remember it's an insecure device.

I think it is around 8 years. I have a Chromebook that is about 10 years old and the last automatic update from Google was about 2 years ago....

 

[dnewton3]

To know if the device is getting updates, do this on a Chromebook ...

Go to:
- Settings
- About ChromeOS
- Additional details

Then you should see a statement like the one underlined below; it will tell you if the device is being supported. (image is from my Chromebook device)
If it is within the support timeframe, all you have to do is reboot it when commanded to get updates.

I would doubt the authenticity of the notification on your child's device.
Google is pretty easy to follow and use; just search their site directly for instructions and help.
Don't trust links sent to the device; go find the help yourself. Log into the account only using formal Google website instructions.

 

[Sayjac]

I have gotten a similar 'fake' McAfee pop up screen in the past. Iirc, I had to go into Windows settings system, scroll down to McAfee and switch off "allow" under system notifications and actions. I believe it's happened to me at least twice. In my cases it was not really from McAfee. If you Google McAfee pop up it's not an uncommon thing. That said, not sure if Chrome OS will have same result. If it's in the browser you would also go to "Allowed to send pop-ups and use redirects" Click more blocks to the right of the site.

 

[JohnnyG]

Scam.
You probably don't even use McAfee Antivirus, and don't need it.

 

[Hall]

I doubt your device is fully patched anymore.

The device isn't 12 years old, it belongs to his 12 year old child.

 

[kschachn]

Can you even install McAfee on a Chromebook?

I’d Powerwash it and see what that does for you. Also get him to change his Google password.

 

[rszappa1]

The device isn't 12 years old, it belongs to his 12 year old child.

Well like someone mentioned you can check your latest update on your chromebook and see if it is current and are getting or not getting auto updates from Google....

 

[Hall]

We don’t leave computers and whatnot connected and on all the time

Those look like pop-ups like others have said. I'm really surprised they work on ChromeOS though, but part of the issue might be what you say ^^ there ^^. Google probably pushes updates constantly and if the machine is off, offline, or not left on long enough, it might not be able to download and install updates. There's literally no harm, including electric usage, in leaving them on 24/7.

 

[97prizm]

My 12yo got a Chromebook, and we keep it up to date, but I’m sure it’s far less secure than the locked down Apple stuff we use.

Today this popped up. I got a photo from my wife.

View attachment 265312
So I see this as I pop out for lunch. I have no idea what the icon in the upper left associated with, and it this implies a hack on Google or what.

Or maybe it’s just a scam email that popped up when received and we are all overthinking it. I don’t know what makes a pop-up like that pop up in chrome.

Im not really familiar with chrome os. I’ve locked everything down via the family app.

But looking for recommendations on locking this down further, cleaning/preventing any issues, and perhaps more important, locking down my home network so anyone can’t get in through this. We don’t leave computers and whatnot connected and on all the time, and can easily move data via tethered phones vs wifi for as long as needed. But I want to be safe.

Any recommendations would be helpful. It’s hard not being home to intercept the scenario directly.

Thanks!

Looks like a phishing scam. You can download and burn a free antivirus and system check disc from distrowatch.com. I've removed windows viruses from a co-workers laptop years ago this way.

 

[kschachn]

I’m not entirely sure what viruses a Chromebook can get. This is likely some browser add-on that can be reversed if the device is Powerwashed. This isn’t a Windows laptop. ChromeOS does have a malware module but I wouldn’t even mess with that.

 

[JHZR2]

Looks like a pop up.

I think @rszappa1 is right about that. ChromeOS only provides support for X number of years.. I doubt your device is fully patched anymore.

I would factory reset the device and consider replacing it. If you continue to use it, just remember it's an insecure device.

This machine is less than a year old.

 

[JHZR2]

Might be spam... A Chromebook will update with Google for about 8 to 10 years then it will not update with the latest Google update..

You can search the make/model to see if it still gets updates from Google. It almost certainly doesn't which means the Chromebook is highly suspect of being hacked.

Look at the domain name in the pop up. What do you think the chance is of a safe message reminding you of some issues with links to click are going to come from India?

The device isn't 12 years old, it belongs to his 12 year old child.

Exactly. The machine is less than a year old. Not 12. It was bought for my 12yo, who also uses chromebooks in school.

Those look like pop-ups like others have said. I'm really surprised they work on ChromeOS though, but part of the issue might be what you say ^^ there ^^. Google probably pushes updates constantly and if the machine is off, offline, or not left on long enough, it might not be able to download and install updates. There's literally no harm, including electric usage, in leaving them on 24/7.

My issue is that I’m getting a photo of the screen while many many miles from home. I have no idea what a Chromebook pop up looks like, and how they get there. If it’s an email coming into Gmail, fine. I don’t know if that little logo is a sign of the chrome mail app or what….

The machine certainly does get updates. My point was that if a bad actor somehow got into our network via this machine, that we don’t leave other adult computers on and connected to the network. There’s nothing else to get into.

I’m not entirely sure what viruses a Chromebook can get. This is likely some browser add-on that can be reversed if the device is Powerwashed. This isn’t a Windows laptop. ChromeOS does have a malware module but I wouldn’t even mess with that.

Ok thanks I’ll look into power wash when I get home.

 

[TheOilWizard]

This machine is less than a year old.

My bad. I skimmed your thread and read "my 12yo Chromebook"

But I would still recommend doing a reset on it.

 

[factorytuned2012]

It’s an Indian website so 100% scam. Weather or not the machine is actually infected that’s a different story

 

[uc50ic4more]

As others have noted, those messages are nothing more than "alerts" from a web site. In this case, they are very scammy-looking. You'll be able to disable alerts from that web site easily enough in settings at either the browser or device level.

 

[Bottom_Feeder]

https://bobistheoilguy.com/forums/threads/help-computer-infected.390853/post-7107726