Chrome extensions with 13.4 million installs caught hijacking searches
A total of 319 Chrome extensions with 13.4 million installations were caught hijacking user searches to generate ad revenue for Bing and Yahoo.
According to BleepingComputer, a massive search-hijacking campaign involving 319 Google Chrome extensions has been uncovered. These malicious add-ons accumulated a combined total of over 13.4 million reported installations.
The scheme operated by intercepting users' search queries and routing them through tracking servers. This unauthorized redirection was designed to generate advertising revenue from major search engines like Bing and Yahoo.
Such large-scale campaigns demonstrate how malicious actors can leverage browser extensions to silently monetize user activity. Victims often remain unaware as their searches are manipulated in the background.
For global users and tech enthusiasts, this incident highlights the ongoing security challenges within browser extension ecosystems. Even official stores can occasionally host extensions with hidden malicious capabilities.
Cybersecurity experts recommend regularly auditing installed browser extensions, removing any unfamiliar or unnecessary tools, and exercising caution regarding the permissions granted during installation.
