Security AlertMedium
319 Chrome extensions with 13.4 million installs hijacked searches
Oct 29, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
A search-hijacking campaign used 319 Chrome extensions with 13.4 million installs. The extensions sent searches through tracking servers to make money from Bing and Yahoo referrals.
Key points
- The campaign added 264 newly identified extensions to an earlier 57-extension report.
- The extensions were unlisted in the Chrome Web Store.
- Some could redirect users to phishing sites or malicious downloads later.
Why it matters
People and small businesses that use Chrome could have had searches quietly redirected without noticing. That can expose users to tracking, fake results, or future phishing risk. Removing suspicious extensions helps protect both accounts and company devices.
Who’s affected: Chrome users and browsers
What to do
- Review your Chrome extensions and remove anything suspicious.
- Check whether your default search engine has changed.
- Run a security scan on devices that use Chrome heavily.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.