Bug? Malware? mystart.com on google chrome directly after install (from public library wifi)

[dinocaveman (Chris Ratke)]

I installed fedora using the media writer on an old hp laptop running linux mint at a whole foods. I used the media writer and did the copy and paste checksums everything was fine. I installed fedora 42 workstation on a lenovo yoga, everything went smoothly. Later at the library, I installed google chrome and it opens with MyStart

I looked it up and it seems like a malware extension.

What do I do? am I infected? I also keep getting draft is being edited in another window when writing this.

I was just going to change the default home website in chrome.
should I unistall chrome? then reinstall it through non public wifi?
completely reinstall fedora through non public wifi?

[glb (Gregory Lee Bartholomew)]

@dinocaveman

I installed google chrome

Are you sure you obtained Google Chrome from a legitimate source? You can find some info about how to manually verify the RPM here:

GPG check FAILED Google Chrome

Google uses a somewhat unusual method of managing their GPG keys. They install a cron script at /etc/cron.daily/google-chrome. My guess is that something went wrong with that script. You probably want to download the keys and rpm package manually from https://dl.google.com/linux/linux_signing_key.pub and Google Chrome - The Fast & Secure Web Browser Built to be Yours and inspect them since the automated system failed.

More likely though, the public WiFi you are using is probably hijacking the connection and routing it to that site. I’d avoid using those pubic WiFi networks.

[litemotiv (Olivier)]

@glb

More likely though, the public WiFi you are using is probably hijacking the connection and routing it to that site. I’d avoid using those pubic WiFi networks.

Someone may have just set up a fake/compromised public access point, it’s one of the easiest ways to hack people.

[Espionage724]

@dinocaveman

Later at the library, I installed google chrome and it opens with MyStart

I looked it up and it seems like a malware extension.

Do you sign into a Google account or have some kind of browser/cloud sync? It could be a rogue extension auto-installed that was disabled/non-functional in the past, but works now on a fresh install.

@dinocaveman

completely reinstall fedora through non public wifi?

That’s likely overkill (if it’s not malware or hotspot payload), but I’d do it for security if at all concerned!

[dinocaveman (Chris Ratke)]

I don’t remember exactly but I think I just went into Firefox and searched google Chrome and clicked on the first link. Maybe it was sponsored but I usually try to avoid those and click on the first or second unsponsored link.

[lendenu (Lorenzo Celsi)]

Chris, if you use a “linux” distribution you should install software from the distribution repositories using the package manager, in Fedora it is DNF. Or you could use Gnome-Software. The “search for” → “link” is traditionally how software is installed in Windows and it is the worst idea in the history of mankind.

Speaking of public WiFi, you must keep in mind it is an untrusted network and then keep your activities to the bare minimum, do not provide credentials logging in your bank account, do not install software from any source, do not run scripts provided by somebody, etc.

I would remove Chome, purge its directories and try with another one, probably it would be enough.

[dinocaveman (Chris Ratke)]

I uninstalled Chrome. Then I reinstalled fedora with the USB media writer.
I actually made that USB with public wifi at whole foods but went through the checksums on the fedora page I was reading and everything checked out ok.
So I kind of trust that USB installation media.

[dinocaveman (Chris Ratke)]

I probably have to get a home 5g or Ethernet soon or a mobile plan with the most hotspot.
T-Mobile 5g home has a tier for more cyber security but I heard that’s messed up to charge cyber security from a service provider.