Chrome extensions with 13.4 million installs caught hijacking searches

Over 300 malicious Chrome extensions, disguised as everyday productivity tools like PDF converters, were able to infiltrate the browser ecosystem and hijack user searches by routing them through attacker-controlled proxy servers. The root problem lies in users' inability to distinguish legitimate extensions from malicious ones, combined with insufficient vetting in the browser extension supply chain. This matters because extensions operate with elevated browser privileges, making them powerful vectors for data theft, phishing, and advertising fraud. The scale of 13.4 million installs demonstrates how easily trust in familiar-looking tools can be weaponized at a massive level.