Add functionality (or a product to the lineup) to:
- Prevent users from downloading/installing malicious browser extensions.
- Routinely update users' clients with the latest 'definitions'
- Scan downloaded/installed extensions for threats
- Notify users if a previously-nonthreatening extension has become a threat
- Offer remediation/removal options, and with approval, would implement the selected option.
Use case:
I want to filter out all YT videos that contain AI generated/modified content (as indicated by "How this was made: Made with AI" in video description). I find a browser extension that claims to do this; I attempt to download it, Bitdefender displays a message that the extension contains a threat, and proceeds in the same fashion (from the user perspective) as it would for any other detected threat, offering options like 'Back to safety' and 'Proceed anyway.' If the extension contains no threat, users see no message until/unless a routine scan reveals that a previously installed extension has become a threat, in which case it presents options for removal or, if possible, remediation.
Malicious extension protection solutions exist for enterprise environments (Seraphic, Push Security, etc.) so presumably there is no technical reason developers can't develop this functionality for consumers, which suggests only corporate leadership perception of ROI stands in the way, which begs the question: Is there really not an adequate market to justify a consumer-focused feature (or product) for this? Browser use is ubiquitous; extensions are exceedingly handy, consumers want the functionality extensions provide, and consumers have as much interest in the security of their systems as corporations do.
