NewsPublished 9 Aug 2026

Finally, something useful from Google regarding search hijacking

Source Reddit NetSec

Discussion

This report discusses Google's upcoming Chrome protection against browser extensions that silently hijack users' default search engines and New Tab pages. The issue involves many extensions abusing this behavior without users' awareness. The protection aims to reduce this abuse by blocking such extensions by default. The information is sourced from a Reddit post linking to MalExt, a database tracking malicious browser extensions. No specific vulnerability or exploit details are provided, and no affected software versions are explicitly stated.

r/netsec (opens in a new tab)u/Huge-Skirt-69900 points0 comments

The number of extensions I’m finding and reporting that silently override users’ search engines is honestly crazy.

https://malext.io/?q=SearchJack

Hopefully Google’s upcoming Chrome protection against extensions that hijack the default search engine and New Tab page will put a serious dent in this. There are way too many extensions abusing this behavior, often without users even realizing what’s happening.

It’s about time Chrome started shutting this down by default.

Links cited in the discussion

https://malext.io/?q=SearchJack

Impact

The impact involves user privacy and security degradation due to unauthorized changes to browser search settings by malicious or policy-violating extensions. This can lead to unwanted search results, potential exposure to malicious content, and erosion of user trust. However, no active exploits or direct attacks are reported in the data provided.

Defensive guidance

Google is introducing a default protection in Chrome to block extensions that hijack the default search engine and New Tab page. Users should ensure their Chrome browser is updated to receive these protections. Since this is a vendor-managed mitigation, no additional user action is currently required beyond updating Chrome. Monitoring and removing suspicious extensions manually can also help reduce risk.

Summary

The content highlights a security concern where numerous browser extensions silently override users' default search engines and New Tab pages, a behavior often unnoticed by users. Google plans to implement protections in Chrome to block extensions that hijack these settings by default. The information is based on community reports and threat intelligence aggregated by MalExt, which tracks malicious and policy-violating browser extensions. The report does not provide technical details of a specific vulnerability or exploit but focuses on the broader threat of search hijacking via extensions and Google's mitigation efforts.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 9 Aug 2026, 06:41 UTC

Technical details

References

Community reviews

Related threats