Insights Security & Privacy
319 Chrome extensions caught redirecting searches: how to check yours
The short version
Researchers found 319 Chrome extensions, installed about 13.4 million times, that quietly take over your search engine. Your searches pass through the operator's server first, so they can be tracked and redirected.
What happened
The extensions pose as PDF converters, manual finders, safe search and AI search tools. Many are unlisted on the Chrome Web Store, Google's official add-on shop, so they do not show up when you search it. They are mostly pushed through ads on websites.
Once installed, the extension sets itself as your default search engine. Your search goes to the operator's server, then on to Bing or Yahoo, and the operator earns referral payments. One extension sent six identical searches to four different places.
Most have since been removed from the store, but the researchers say new ones keep appearing.
Why it matters to you
The operator can see your search history. The researchers also warn that the destination can change at any time without the extension changing, so a search could end up on a fake page or a harmful download.
Many of these add-ons request no permissions, so they can look harmless. A removed extension also does not mean the next one is gone.
What to do
Open Chrome's extensions page and remove anything you do not recognise or no longer use, especially search, PDF or security tools you do not remember installing. Check that your default search engine is the one you chose.
Run a full scan with your antivirus. Avoid add-ons from unknown publishers, and do not install tools from pop-up ads.
Sources
- Chrome extensions with 13.4 million installs caught hijacking searches BleepingComputer (opens in a new tab)
- Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users Socket (original research) (opens in a new tab)
- Unlisted Chrome extensions with 13M+ installs are hijacking search queries Cybernews (opens in a new tab)
Researched and written by our automated news system.
Free website check
Is your own website in good shape?
Get a score out of 100 for speed, security, Google visibility and trust in about 30 seconds, with the three things most worth fixing. Free, and no email needed.