Secure Chrome and Edge Downloads with OPSWAT’s Built-In File Security for Browser

As day-to-day users of online tools, we have an inherent trust in familiar file formats such as docs, archives, or PDFs. Users download and open these files without hesitation, not realizing attackers can take advantage of this trust.  

Malicious scripts embedded inside legitimate-looking documents like word documents, PDFs, or images stand out as an attacks vector. In fact, according to Check Point Research, PDF-based attacks account for 22% of all malicious attachments.  

Archives as well can be exploited by attackers.  

Adversaries can hide malicious content via mass compression, which can deliver payloads through scripts or executables. Attackers can also spoof ZIP filenames or use misleading folder paths within them to avoid threat detection. 

Whether it’s an archive, a PDF, an Office document, or an image, these documents all appear harmless at first glance. Unfortunately, once opened, a malicious code can be executed in the background, opening the door to adversaries.  

Since 60% of last year’s breaches were possible due to the human element – a mistake carried out in earnest, with no malicious intent – we can’t keep on trusting the files we’re downloading are clean.  

Instead, we need to double-down on our suspicions and reinforce security practices.  

This includes moving on from previous approaches, as they can no longer handle sophisticated threats. 

While traditional antivirus tools have long been a staple of cybersecurity, they weren’t designed to handle the types of threats we face today. 

Antivirus engines rely on signature-based detection. They can only identify vulnerabilities that already exist in their malware signature databases. 

Although these databases are updated multiple times a day, modern attacks are specifically engineered to evade detection. By the time a new threat is identified and added to a database, the damage is already done. 

To achieve real-time threat detection and prevention, organizations need a far more comprehensive approach: 

• Scan files with multiple engines and multiple databases 
• Examine every component of a file, including hidden elements 
• Remove anything that appears suspicious 
• Execute files in a safe, isolated environment to observe potential malicious behavior 

OPSWAT File Security for Browser delivers on these requirements. 

With its combination of technologies and intuitive interface, OPSWAT File Security for Browser provides fast, light, and effective security against most file-borne threats. 

• Document malware 

Malicious documents often hide dangerous macros or scripts that activate as soon as you open them. 

OPSWAT File Security for Browser scans each file with 20+ antivirus engines and removes suspicious elements (macros or embedded scripts) to give you a safe and usable version of the file.  

For evasive malware, the Adaptive Sandbox opens the document in a secure, isolated environment to observe its behavior before it ever reaches your device. 

• Trojanized installers 

Trojanized installers look like normal software but secretly contain malware.  

The Metascan Multiscanning technology used by the extension is compatible with .exe files, so it can scan installers as well.  

Since CDR doesn’t apply to executables, Sandboxing runs the installer in a secure, isolated environment to spot hidden behavior. 

• Malicious ZIP/PDF files

To counter hidden threats inside ZIPs, the extension uses Multiscanning to unarchive and examine the contents of these files. 

Deep CDR sanitizes ZIPs or PDFs by stripping embedded scripts or hidden layers from entering the system.  

• Payloads hidden in harmless-looking files 

Some threats disguise themselves inside images, documents, or other files that appear completely safe.  

Deep CDR is especially powerful here, as it deconstructs and rebuilds the file to remove any executable or hidden malicious content, even if the threat is brand-new or unknown.   

• Threats delivered through compromised or spoofed domains 

Even legitimate-looking websites can deliver malicious downloads if they’ve been compromised. The extension prevents these threats by checking URLs, IP addresses, and domains for malicious behavior using multiple IP & URL reputation sources. 

• Evasive or zero-day behaviors 

Some threats are designed specifically to bypass traditional antivirus tools.  

To handle advanced attacks, the extension combines Multiscanning, Deep CDR, and the Adaptive Sandbox, to provide a truly comprehensive analysis and detect threats which others miss.