> TritonInfoSec News
Home / Oct 30, 2026 / Story
0
#7 BleepingComputer general October 29, 2026 at 16:10 UTC

Chrome extensions with 13.4 million installs caught hijacking searches

By Bill Toulas

AI Summary

Researchers identified 319 malicious Chrome extensions with a combined 13.4 million reported installs that hijacked users' search queries by routing them through attacker-controlled tracking servers, generating advertising revenue via Bing and Yahoo. The campaign operated at scale while evading detection due to the extensions' legitimate-appearing functionality. Security teams managing enterprise browser environments should audit installed extensions against the identified IOCs.

Read full article → https://www.bleepingcomputer.com/news/security/chr…

Relevance score: 83.0/100

# More from October 30

  1. 1
    Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen The Hacker News
  2. 2
    New Cisco firewall zero-day exploited to crash SSL VPN devices BleepingComputer
  3. 3
    Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network SecurityWeek
  4. 4
    Volt Typhoon hides zero-day attacks using 'Silent Train' framework BleepingComputer
  5. 5
    Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces The Hacker News
  6. 6
    China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility The Hacker News
  7. 8
    Massive leak exposes 41,000 DHS workers and undercover ICE agents Ars Technica Security
  8. 9
    Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls The Hacker News
  9. 10
    Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys The Hacker News