This morning we published a warning for Google Chrome users on Windows. According to Defense Code, a bug in Google Chrome allows attacks through the browser's automatic downloads.
Disable automatic downloads in Google Chrome
One option for your security is to disable automatic downloads through the app's settings.
From the Chrome address
chrome://settings
Scroll down and click on “Show advanced settings….”
Further down you will find the “Downloads” section.
Check “where to save each file before downloading” as in the image below.
By simply enabling this setting, Chrome will ask you where to save files each time before the browser starts downloading.
________________
Although you add a layer of protection to Chrome's download handling, the modified SCF files may still arrive in different ways on the systems targeted by hackers.
One of the protection options that users and system administrators have is to close the ports used by SMB traffic through the firewall. Microsoft has a guide you can use, and it suggests blocking communication to and from the Internet on SMB ports 137, 138, 139, and 445.
Warning: Blocking these ports may affect other Windows services, such as the fax service, the print spooler, connecting to local networks, or sharing files and printers.
