Whilst a good virus & malware scanner on your computer can protect your system from most problems, unfortunately it is also possible to get attacked indirectly through your web browser.
Malicious web sites can exploit web browser vulnerabilities that either have not received a security update yet or have gone unpatched by the user, and this is where users most often get into trouble.
Problematic Browser Plug-ins
When it comes to security issues with web browsers, the entry point creating the most issues is the plug-ins themselves. Recently, both Facebook and Apple experienced intrusions through Java applets that had security vulnerabilities. At any given time, there are always security issues that are being discussed on hacking discussion sites, but remain unpatched. This opens a window into a system even for systems that are up to date.
Remove any plug-ins that you do not need. This closes an access point for a would-be hacker to exploit later.
Update all plug-ins. Check using an online checker from Mozilla (checks plug-ins for other browsers than Mozilla Firefox) to see how updated your web browsers are.
Security Issues With The Browser
The biggest issue here is when users have access to old web browser versions that have widely known security exploits. In some cases, the browser can be patched but in other cases it is no longer supported and patches do not exist for security issues. The best way to protect yourself is to update to the latest version of the web browser and ensure patches are kept current.
Nevertheless, anti-virus packages should be installed to scan for possible penetration into your computer or network.
Accidental Malware Installation
Hackers look for any way they can to add malware to your system.
This gives them long term access to your system through a backdoor, where they can sift through your files for passwords and other useful information. Beyond that, they can also use your computer as a slave to attack other systems across the net and hide their activities by using your computer as cover.
Many sites need an ActiveX control to be added to your browser in order to view their content. This is often legitimate. Such controls exist for Flash, Silverlight, media players, etc. This kind of control grants a lot of access to your system though, so you need to be sure it is legitimate first.
When being prompted to install an add on, consider the source. Is this a well known web site? Have you typed the web address correctly or is it possible it is a typo on the domain, and you have been directed to a hacker’s site that is trying to trick you into installing their software?
When downloading freeware or trialware, it is best to use well regarded sites which are not fake. Downloads.com is owned by CNET and has been in operation for years. FileHippo.com is also a good site for downloads of all kinds. When searching for a specific app, be sure to access it through a known download site, rather than just a link from the highest ranking page in your search engine.
Above all, be careful, keep your eyes open and stay safe with your web browsing.
