Chrome extensions with 13.4 million installs caught hijacking searches
Summary
A large-scale search-hijacking operation utilized 319 Chrome extensions, installed by 13.4 million users, to redirect search queries. These extensions sent user searches to tracking servers to monetize advertising revenue from Bing and Yahoo.
IFF Assessment
This campaign represents a significant threat to user privacy and security by hijacking search queries and potentially exposing sensitive information or leading users to malicious sites.
Defender Context
This incident highlights the ongoing risk posed by malicious browser extensions, emphasizing the need for users and organizations to be vigilant about the permissions they grant to extensions and to regularly audit installed plugins. Defenders should educate users about the dangers of extensions and implement policies to manage or restrict the use of unapproved browser add-ons.